Imagine if you found a secret passage in your school that nobody else knew about. You could just keep it to yourself, but if it was dangerous or could let strangers in, it would be important to tell someone who could fix it, right? That's a bit like what ethical hackers do with cyber security testing. They're like the good guys who find secret ways into computer systems but then tell the right people about it so those holes can be fixed.
For the good hackers (ethical hackers), telling people about the security problems they find is part of being responsible. If they didn't report these problems, they wouldn't be doing their job right. Sometimes, they even get rewarded with a "bug bounty," which is like a prize for finding the issue.
Just like there are rules in school you have to follow, companies have to follow certain rules too, especially about keeping information safe. If a company finds a problem in their security, they have to tell the right authorities to show they're trying to fix it. This is super important if they've already had a problem, like a data breach, because it can help them avoid getting in big trouble, like getting fined.
If a company had a security problem, they need to win back the trust of their customers or clients. By telling them about the tests they did and what they're doing to fix any problems, it's like saying, "We're making sure this won't happen again."
Knowing exactly what the security tests found helps a company figure out where they need to focus their efforts and money to make things safer. It's like knowing you're bad at math and then getting extra help in that subject.