Managed Autonomous Pentesting (MAP) vs off-by-slash (2026)