'It's positive that AI can spot vulnerabilities'