Ask for a specialized and lookup audit for your site to find out what they think really should be performed, why, and exactly what the expected consequence really should be. You'll likely must pay for this. You'll likely have to provide them with examine-only use of your website on Search https://rsac.org