Automated vulnerability scanning with DAST tools and manual penetration testing are two distinct approaches to application security testing. Though the two are closely related and sometimes overlap, they differ (among other things) in scope, efficiency, and the types of security vulnerabilities found.