ZOYA measures and monitors. It does not perform remediation, does not staff delivery teams, and never bids on the work it recommends.
That is a structural constraint rather than a slogan, and it is the reason the deliverable is able to recommend against funding something. An assessment written by a firm hoping to win the remediation contract carries an incentive it cannot fully escape, however honest the individuals are.
It also means keeping the tooling you already bought. Scanners are good at what they do, and their output is evidence ZOYA consumes rather than replaces.