There is nothing wrong with a proposal — but it is not an audit. When the person examining your website earns money from the repair, every finding carries a question you cannot answer: is this a problem, or a pitch?
Onduu does not design websites, run marketing, resell hosting or manage infrastructure. It publishes the method, the date, the scope and the limits of every check, so you can disagree with a finding on the evidence. Implementation is done by the parties responsible for it — independent providers you contract directly, and the suppliers of your infrastructure.
An Onduu audit is a decision tool, not a penetration test, legal opinion, compliance certificate or guarantee of business results.