Application/server Security Audit

I would like to get a security audit done on our online form and server. We are looking to see if there are any vulnerabilities that can be found by scanning things like ports, certificate errors, TLS/SSL Beast, bad headers, error handling/meassaging, sql hacks etc.. We would like to get an output from your tools that ranks issues in terms of severity so we know what to look at fixing first. You will not have access to the server and this will be a live production application so while you run your scans and checks we cannot bring down the system or drop its data. Please provide some sample of what you will include in our test/audit and what the reports might look like when done.