In a vulnerability assessment, all system assets are scanned to identify all known and unknown vulnerabilities and build a prioritized list of them. 

In a penetration test, we exploit the found vulnerabilities to show what impact a real life hack attack can have. Penetration tests are goal oriented, while vulnerability assessment will take a holistic approach and look at all available systems. 

In our MVPF Security Assessments, we combine the two, to manually validate each vulnerability. Only with manual exploitation of each vulnerability way we can demonstrate and assess the effect of an attack by a real life hacker.