What is a vulnerability scan & why is managed vulnerability scanning different?