Automated pentesting finds attack paths, but misses SIEM, EDR, cloud, identity, and AI control gaps that leave risk hidden.