https://www.technig.com/vulnerability-assessment-vs-penetration-testing/