A score alone does not explain what a developer needs to fix. The practical value seems to be in clear findings and reproducible examples.
What would you ask about scope and manual testing before choosing a provider? Would follow-up verification be part of the same quote?