The warranty does not include the penetration test report. Equal guarantee and penetration test report are two different concepts, and equal guarantee does not cover penetration test report. Letter of guarantee refers to a document issued by a professional organization to prove that the enterprise has reached a certain level of security protection after the enterprise has carried out information security management in accordance with national regulations and standards and passed the level protection assessment. Penetration test report refers to the process that security testers detect, analyze and evaluate the security vulnerabilities of enterprise networks, systems and applications, and record the evaluation results in detail in the report. Although the security vulnerability assessment will be carried out in the process of security assessment, the security guarantee does not contain specific security vulnerability information and penetration test report. Therefore, enterprises need to carry out the same security assessment and penetration test at the same time to ensure the comprehensiveness and effectiveness of their information security protection capabilities.