Vulnerability assessment is automated or manual scanning to find vulnerabilities in your systems, whereas penetration testing is going further by exploiting the discovered vulnerabilities.