– Vulnerability assessment is the process for detecting faults on the target. The organization knows that its system or network has defects or weaknesses and wants to identify those defects and prioritize them to correct them.  – The penetration test involves identifying vulnerabilities in the target. Here the organization will implement all possible security measures and would like to test whether there is some alternative way to hack their system or network.