FireCompass AI-powered Pen Testing vs jwt-cracker (2026)