Pentesting is a more comprehensive and intrusive form of testing than vulnerability scanning. Vulnerability scanning can be used to identify potential vulnerabilities, but won’t necessarily confirm if these can be exploited. Pentesting includes active attempts to exploit vulnerabilities in order to determine their impact.