We got a very detailed report of what was tested, how they tested it and what was done to exploit the vulnerability, and they gave some remediation tips.

We need to have this done to put out a product that not only we can be confident in, but that our clients can be confident in as well.