But maybe you shouldn’t raise so much money and make a big fuss about it when all you’re selling is a template?
Did someone actually go and confirm your role based access control matrix is up to date and user accounts have the right access? Were all of those screenshots watermarked with timestamps?
There is work to do, whether or not auditors are doing it is another question.