A vulnerability scan is an automated check that compares systems against a database of known security flaws — without proving whether they can actually be exploited.
In detail
Scans are fast and broad, producing a list of potential issues with severity scores. But they don't confirm real-world exploitability, so they can't tell you which findings are actually dangerous.
Scans are hygiene; pentests are assurance.
Related terms
Last updated: 5 June 2026 · 4 min read