Vul­ner­a­bil­i­ty Assessment Pen­test Focus All vul­ner­a­bil­i­ties Only exploitable vulnerabilities Depth On the sur­face only On mul­ti­ple lay­ers (incl. pivoting) Risk Esti­mat­ed Enables for bet­ter esti­ma­tion due to com­bi­na­tion of vulnerabilities