Vulnerability assessments identify potential vulnerabilities, while penetration tests find and validate those vulnerabilities to gain access to networks, systems, and sensitive data. Unlike penetration tests, vulnerability assessments are highly automated by vulnerability scanners, produce false positives, and miss the areas that require human professional judgment.