What’s the difference between a penetration test and a vulnerability scan?

While the names sound similar, there is a difference between a penetration test and a vulnerability scan. A penetration test (pen test) simulates an actual attack to find unknown security weaknesses and potential attack paths within your system. A vulnerability scan is designed to find and prioritize security vulnerabilities within your systems based on their severity and potential impact.  

• New: These vulnerabilities have only been recently discovered and publicly disclosed. 
• Known: They are documented, and the security community has developed awareness around them, including how they can be exploited and how to remediate them.  
• Unknown: Vulnerabilities or weaknesses that have not been previously identified or documented within an organization’s systems. These can include newly discovered security flaws, hidden vulnerabilities, and unexpected attack paths.