DryRun Security AppSec Agents vs password_compat (2026) | Compare Static Application Security Testing Tools