Did you click on the "full report" links, those are just simple page attestations. The latest appears to be a private bug bounty program, where 9 high priority

Did you click on the "full report" links, those are just simple page attestations. The latest appears to be a private bug bounty program, where 9 high priority issues were discovered. Who knows what they where, or whether any of the low priority issues should have been classified differently. Without transparency, we just trust an empty attestation.