What’s the difference between a web app pen test and a vulnerability scan?

A vulnerability scan is automated and flags known issues. A penetration test adds expert human analysis, actively exploiting weaknesses to understand the real business impact and uncovering the business-logic and chained vulnerabilities that scanners simply cannot find.