VAPT is a technical approach to address security loopholes in the IT infrastructure of an organization (application, software system, network etc.). Vulnerability Assessment is a process of identifying with an objective not to miss any loopholes. Based on the observation of Vulnerability Assessment with regards to severity, a Penetration Test will be conducted. Penetration Test is a proof-of-concept approach to truly explore and exploit vulnerabilities. This method confirms whether or not the vulnerability actually exists and additionally proves that exploiting it may end up in injury to the application or network. The PT process is mostly intrusive and can actually cause damage to the systems; evidence of the same are captured as screenshots or logs, which further helps to aid remediation.
Process methodology would be:
Scanning the network or application
Searching for security flaws
Exploiting the security flaws
Report generation on risk, severity & probability
Reassessing the system
Final report

VAPT is a technical approach to address security loopholes in the IT infrastructure of an organization (application, software system, network etc.). Vulnerability Assessment is a process of identifying with an objective not to miss any loopholes. Based on the observation of Vulnerability Assessment with regards to severity, a Penetration Test will be conducted. Penetration Test is a proof-of-concept approach to truly explore and exploit vulnerabilities. This method confirms whether or not the vulnerability actually exists and additionally proves that exploiting it may end up in injury to the application or network. The PT process is mostly intrusive and can actually cause damage to the systems; evidence of the same are captured as screenshots or logs, which further helps to aid remediation.
Process methodology would be:
Scanning the network or application
Searching for security flaws
Exploiting the security flaws
Report generation on risk, severity & probability
Reassessing the system
Final report