Which SSAE 16 audit report is simply an attestation of audit results?

SOC 1 reports focus on controls relevant to a user entity's financial reporting and are restricted to specific parties like the user entity and its financial auditors.

SOC 2, Type 1 reports detail a service organization's system and the suitability of the design of its controls at a specific point in time, providing comprehensive information beyond a simple attestation.

SOC 2, Type 2 reports provide a detailed description of a service organization's system and the operating effectiveness of its controls over a period of time, making them far more detailed than a simple attestation.

SOC 3 reports offer a high-level summary of a service organization's internal controls over information security, suitable for general public distribution. They serve as an attestation of audit results against the Trust Service Criteria, offering assurance without the detailed system description and control testing results found in SOC 2 reports.