Pay for the seller's scan
You cannot commission this yourself. Analysis needs a read-only connection to the repository and only its owner can grant that, so what you are buying is a prepaid scan the seller redeems. You get a link. They connect. Nobody hands over source, including to you.
Code assessment, buyer funded
$299- The full report on their repository, with evidence for every finding
- A public certificate bound to the commit they connect
- One fix-and-rescan, which is theirs to use
Claiming it is how the seller agrees you get the report. That condition is on the claim screen, above the button, in the same words.
If nobody claims it within 30 days, we refund you. A seller who would rather not share the result simply does not claim it, and you are not out of pocket for a conversation that went nowhere.
The grade is not affected by who paid. Scoring is a published, deterministic function over the findings, and the certificate is issued whatever it comes to, so there is nothing here for your money to move any more than there was for theirs.