Visa Expands Cybersecurity Portfolio with AI-Powered Vulnerability Framework

Global digital payments leader Visa has announced enhancements to its cybersecurity portfolio to assist organisations in identifying and resolving software vulnerabilities. The company unveiled the next iteration of the Visa Vulnerability Agentic Harness (VVAH), an open-source, model-agnostic framework.

According to Visa, the updated framework aims to help organizations reduce the Mean Time to Adapt (MTTA), which measures the duration between the discovery of an attack path and its resolution. The company stated that some resolutions have dropped from weeks to hours under the new workflow.

Originally introduced following Visa's participation in Anthropic's frontier AI cybersecurity initiative, Project Glasswing, VVAH initially focused on uncovering vulnerabilities and generating structured findings. The latest release extends that workflow to include remediation and validation within a single structured process.

Alongside the technical framework update, Visa Consulting & Analytics (VCA) has introduced three new cybersecurity advisory services. These services are intended to help clients assess risk, prioritize remediation, and strengthen operational resilience.

Prateek Sanghi, Head of Visa Consulting & Analytics for Asia Pacific, noted that the speed of vulnerability exploitation has increased alongside digital threats. He stated that shifting the operational focus toward reducing the Mean Time to Adapt has become a priority for organizations managing complex security environments.

Over the past year, the VCA Cybersecurity Advisory Practice has worked with various clients to evaluate security maturity. For instance, CAIXA Cartões utilized Visa's advisory services to support its risk management and operational resilience initiatives.

Lessandro Thomaz, Executive Director at CAIXA Cartões, commented that the collaboration helped broaden the institution's strategic perspective on cybersecurity by providing structured assessments of its process maturity.

Since its open-source release in June 2026, VVAH has been downloaded by developers globally. Additionally, Visa has joined industry initiatives related to secure software development, contributing VVAH to NVIDIA's Open Secure AI Alliance and collaborating on IBM and Red Hat's Project Lightwell initiative.

"As artificial intelligence accelerates both the frequency and sophistication of cyber threats, businesses must shift their focus from merely identifying security flaws to rapidly resolving them. Visa's approach highlights a necessary evolution in risk management, where open-source collaboration and structured frameworks like VVAH help organizations shrink response times from weeks to hours. For growing enterprises and technology firms, embedding operational resilience and prioritizing critical vulnerabilities early on is essential for maintaining customer trust and long-term business continuity." — Dr. Shishir Gupta, Founder & CEO, StartupLanes