jwt-hack vs Plainsea Agentic Penetration Testing Platform (2026)