Penetration Testing v Vulnerability Scanning

A penetration test is more intrusive as it tries to fully exploit the vulnerabilities that it finds and could cause damage to IT systems, whereas vulnerability scanners are non-intrusive, as they scan for vulnerabilities. Even a credentialed scan only scans the registry/permissions and finds missing matches - it is informational and does not exploit the system, therefore, is less likely to cause damage to systems.