| Automated VAPT | Manual VAPT | |
|---|---|---|
| Reconnaissance | ||
| Passive | ||
| Active | ||
| Issue Scope | ||
| Exploitation Type | Direct Exploitation | Combining issues |
| Existing Exploits | ||
| Create new exploits | ||
| Business logic exploits | ||
| Authentication bypasses | partial | |
| Authorization bypasses | partial | |
| Lateral Movement | ||
| Reporting | Automated Report | Custom Report |
| Management Summary | ||
| Proof of Concept | ||
| Retest Capability | In full only | Custom testing possible |