Vulnerability assessments passively scan for known weaknesses, while penetration tests actively exploit vulnerabilities like an attacker. Pen tests offer in-depth analysis of exploitability and impact, while VA scans provide broad visibility with prioritization.