@Ethan-TP 

This is the information provided to us by the company that performed the vulnerability testing.

We used the original equipment certificate; it has not been changed.

"We performed the vulnerability assessment using Tenable Nessus Professional. Nessus evaluates systems against a continuously updated database of vulnerabilities, insecure configurations, and known exposures, generating a detailed report of the detected findings.

Furthermore, the detected vulnerabilities are backed up by standardized identifiers such as CVE (Common Vulnerabilities and Exposures) and rated according to their severity using the Common Vulnerability Scoring System (CVSS) standard. This ensures that the findings are not arbitrary, but correspond to recognized vulnerabilities published in international databases such as the National Vulnerability Database (NVD), as well as vendor security bulletins.