Trail of Bits Software Assurance vs VinCSS Penetration Testing (2026)