What would the correct terminology actually be here I wonder?

In short, they found vulnerabilities and each have been assigned CVEs.

I am pretty sure that the nano-analyzer is just a limited open source demo of their "System over Model" thesis from https://aisle.com/blog/system-over-model-zero-day-discovery-..., not the main product.