Vulnerability Assessment is a technical review of the Code for any bugs & loopholes that may allow unauthorized access or entry to the System.
While writing code developers may not be aware of the security loopholes in the written code.
Vulnerability Assessment is designed to identify such loopholes so that it can be fixed permanently, this ensures that hackers are unable to access the code for malicious purposes.
OWASP Framework Top 10 2017
Grey-box Manual Testing
One (1) Cycle per Application
Two (2) Scans per Cycle: Discovery & Final
Duration: 1.25 Months per Cycle