They are not just proposing "use our tool to find gaps", they are proposing "use our tool to help *patch* gaps". The optimal use case is to give the tools full access to your networks, documentation, etc. so it can propose holistic solutions.
This is not charity work on the part of AI companies.