A VAPT test involves several stages:
Define the scope and method of the test, specifying goals.
Execute the test with a vulnerability scanner and pen-testing tools.
Analyze the results of the tests for weaknesses.
Report on the results of the test and agree on a remediation strategy with stakeholders.
Implement remediation tasks.
A vulnerability management system will perform the entire test cycle for you, providing templates for standard goals and assessment strategies, implementing tests, and reporting on results.