Alex,

as far as I understood, the "Scan" simply retrieves the installed DNN's version number and issues a list of potential security risks, I did run it against a customers site, which is not affected by previous issues due to its configuration (like being a single portal installation with host = admin, i.e. no risk of the admin gaining host permission) and the service listed the two assumingly identified new issues as all published security bulletins issued by DNN since that version (even if affecting later versions solely). To me, this scan does not really sound like a valuable service and, since noone had the chance to validate the changed code applied to the site, you cannot be sure that a) it fixes the issue and b) does not harm or damage your portal software. I would be very careful with accecpting any service like this.