DerScanner Full Cycle Application Security Testing vs password_compat (2026)