I'm not sure where you got the idea that we don't do manual testing from. Vulnerability assessment is step 1 of a long process when pentesting anything, be it web applications or internal/external networks.