Automated security scanning and penetration testing serve different purposes.
Automated scanning
Scanners provide repeatable checks for observable weaknesses and configuration signals.
Penetration testing
Authorized experts validate exploitability, business logic and application behavior that automated rules may not understand.
Use both
Continuous scanning can provide coverage between periodic professional assessments.