What is the difference between vulnerability scanning and penetration testing?

Question

Accepted Answer

**Vulnerability Scanning** — automated detection. **Penetration Testing** — manual exploitation.

**Vulnerability Scanning:**
- Automated tools.
- Identifies known vulnerabilities.
- Regular schedule.
- Broad coverage.

```
Vulnerability Scan:
Nessus, Qualys, OpenVAS
Scan all systems
Report known CVEs
(Automated, regular)
```

**Penetration Testing:**
- Manual, expert-driven.
- Exploits vulnerabilities.
- Simulates real attacks.
- Deeper analysis.

```
Penetration Test:
Ethical hacker attempts exploitation
Finds custom vulnerabilities
Reports impact and remediation
(Manual, expert)
```

**Key differences:**
- **Scanning** — automated.
- **Pen Testing** — manual.
- **Scanning** — breadth.
- **Pen Testing** — depth.

Systems Analyst: What is the difference between vulnerability scanning and penetration testing?