Visa Expands Cybersecurity Portfolio with AI-Powered Vulnerability Framework and Advisory Services

Global digital payments leader Visa has announced enhancements to its cybersecurity portfolio aimed at helping organizations identify and resolve vulnerabilities more effectively. The updates include the latest release of the Visa Vulnerability Agentic Harness (VVAH), an open-source, model-agnostic framework designed to shift AI-powered cyber risk management from discovery to validated remediation.

According to Visa, the updated framework aims to reduce the Mean Time to Adapt (MTTA)—the duration between the discovery and resolution of attack paths. The company stated that some resolutions that previously took weeks can now be completed in hours. Originally launched following Visa's participation in Anthropic's frontier AI cybersecurity initiative, Project Glasswing, the initial version of VVAH focused on uncovering vulnerabilities and assessing exploitability. The new release extends this workflow to include remediation and validation within a single structured process.

Alongside the technical framework update, Visa introduced three new cybersecurity advisory services through its Visa Consulting & Analytics (VCA) practice. These services are intended to help clients assess risk, prioritize remediation efforts, and build operational resilience against evolving cyber threats.

Prateek Sanghi, Head of Visa Consulting & Analytics for Asia Pacific, noted that the rapid scale of AI-driven threats makes the speed of vulnerability exploitation a critical concern. He emphasized that the primary challenge is determining which risks require immediate attention rather than simply counting the number of vulnerabilities identified.

Financial institutions have begun utilizing these advisory services. CAIXA Cartões recently worked with Visa to support its cybersecurity maturity assessment and prioritize its risk management initiatives. Lessandro Thomaz, Executive Director at CAIXA Cartões, stated that the collaboration helped broaden the institution's strategic perspective on cybersecurity and structured its operational resilience efforts.

Since its open-source release in June 2026, VVAH has been downloaded by tens of thousands of developers globally. Visa has also joined broader industry initiatives, contributing VVAH to NVIDIA's Open Secure AI Alliance and collaborating on IBM and Red Hat's Project Lightwell to support secure open-source software practices.

"As artificial intelligence accelerates the speed and scale of cyber threats, organizations must evolve their security strategies from mere vulnerability discovery to rapid remediation. Visa's integration of AI-driven frameworks like the Vulnerability Agentic Harness highlights a necessary shift in the industry toward reducing the time between threat identification and resolution. For businesses operating in the digital economy, prioritizing actionable risk management is essential to maintaining operational resilience and customer trust." — Dr. Shishir Gupta, Founder & CEO, StartupLanes