What is Vulnerability scanning? Definition and explanations

A vulnerability scan is an automated analysis that compares a system's versions, configurations and services against databases of known flaws. It is fast, repeatable and suited to regular monitoring. It does not demonstrate exploitability and produces false positives: it flags candidates to verify, where a penetration test proves impact.