Recommendations for a security audit company?

We’re looking to get a security audit done on our websites, Shopify and WordPress, and I’m curious if any of y’all have recommendations.

Just seeking out a third party to try and find gaps we may have missed.

Bonus points for them also being able to handle and fix breaches. Hopefully that won’t ever be needed - but it’s good to have a contact now rather than having to search afterwards.