I'd hope companies practice Zero Trust nowadays and don't just close off all the ports (and leave things vulnerable, just inside a VPN...)
What we build is primarily focused on companies that have at least hybrid stack - some on prem, some in cloud. If you completely behind load balancer and have strict change management, we can't bring you any value.
In ideal world, we wouldn't have any business. But oh boy... Companies host wild stuff.
Every single conversation I had with clients ended up with us showing some of their infra and the response was "wow, we didn't know this is ours".
Said every security company ever. :)