From what I ve seen, most tools rely a lot on automated scans and predefined checks. In reality they often miss issues that only show up during real pentesting.
I m curious how you approach this.
Do you use automated scanners, manual pentests, or a mix of both? What frustrates you the most about the tools you use today? Have you ever found a serious issue that your tools completely missed?
Would be great to hear real experiences from others.