Managed Autonomous Pentesting (MAP) vs timing_attack (2026)