FAQs

Again, vulnerability assessments refer to a system scan to uncover potential, common security issues. They're part of the plan of a true network penetration test. The vulnerability assessment uncovers potential problems, but the pen test shows what could happen in a real-time attack against a live system.

Also, trained and experienced security experts will interpret these assessments and tests' results, so an organization doesn't have to worry that they really don't understand the report they get or how to handle any issues.

It's the difference between reading about what could happen and seeing what happens. Also, the vulnerability scan will generally only uncover technical issues and not any threats from the human side of managing security.