off-by-slash vs SecurityBoat TriNetra Agentic Pentest (2026)