Visa Expands Cybersecurity Portfolio with AI Vulnerability Tool and Advisory Services

Global payments technology company Visa has announced enhancements to its cybersecurity portfolio, introducing new capabilities aimed at helping organizations identify and resolve system vulnerabilities more efficiently. The updates include the latest release of the Visa Vulnerability Agentic Harness (VVAH), an open-source, model-agnostic framework, alongside expanded advisory services from Visa Consulting & Analytics (VCA).

According to Visa, the new VVAH release shifts AI-powered cyber risk management from discovery to validated remediation. The framework aims to reduce the Mean Time to Adapt (MTTA)—the duration between discovering and resolving an attack path—with some resolution timelines reportedly dropping from weeks to hours. Originally developed following Visa's participation in Anthropic's frontier AI cybersecurity initiative, Project Glasswing, VVAH now supports a structured workflow covering discovery, triage, remediation, and validation.

Alongside the technical framework, Visa Consulting & Analytics has introduced three new cybersecurity advisory services. These services are designed to help clients assess risk, prioritize remediation efforts, and build operational resilience. Prateek Sanghi, Head of Visa Consulting & Analytics for Asia Pacific, noted that the speed of AI-driven cyber threats makes prioritization and remediation more critical than tracking the sheer volume of identified vulnerabilities.

Financial institutions have begun utilizing these advisory offerings. CAIXA Cartões recently worked with Visa on a cybersecurity maturity assessment to prioritize risk management initiatives. Lessandro Thomaz, Executive Director at CAIXA Cartões, stated that the partnership has helped the institution evaluate its processes and strengthen operational resilience.

Since its open-source release in June 2026, VVAH has been downloaded by tens of thousands of developers globally. Additionally, Visa has joined broader industry security initiatives, contributing VVAH as a model-agnostic framework to NVIDIA's Open Secure AI Alliance and collaborating on IBM and Red Hat's Project Lightwell to support open-source software security.

Visa operates a digital payments network connecting consumers, merchants, financial institutions, and government entities across more than 200 countries and territories.

"As artificial intelligence accelerates the speed and scale of cyber threats, financial institutions and digital businesses must move beyond simply identifying vulnerabilities. The integration of AI-driven frameworks like Visa's Vulnerability Agentic Harness demonstrates how automation can significantly reduce resolution times from weeks to hours. For enterprises navigating complex digital ecosystems, shifting the focus toward rapid, validated remediation and structured risk management is essential to maintaining customer trust and operational resilience." — Dr. Shishir Gupta, Founder & CEO, StartupLanes