Visa Expands Cybersecurity Portfolio with New AI-Driven Vulnerability Management Tools

SINGAPORE — Visa has announced a series of enhancements to its cybersecurity portfolio, aimed at helping organizations identify and resolve digital vulnerabilities more effectively. The updates include the next evolution of the Visa Vulnerability Agentic Harness (VVAH), an open-source and model-agnostic framework.

According to the company, the latest VVAH release shifts AI-powered cyber risk management from mere discovery to validated remediation. The framework is designed to help organizations discover, triage, remediate, and validate vulnerabilities within a single structured workflow. Visa stated that the tool helps reduce the Mean Time to Adapt (MTTA)—the duration between the discovery and resolution of attack paths—with some resolution times dropping from weeks to hours.

To support clients in operationalizing these insights, Visa Consulting & Analytics (VCA) has introduced three new cybersecurity advisory services. These services are structured to assist clients in assessing risk, prioritizing remediation efforts, and strengthening resilience against evolving threats.

Prateek Sanghi, Head of Visa Consulting & Analytics for Asia Pacific, noted that the speed at which cyber threats scale and vulnerabilities are exploited has accelerated alongside AI adoption. Sanghi emphasized that identifying vulnerabilities is no longer the primary differentiator, but rather determining which risks require immediate attention and resolving them before malicious actors can exploit them.

Over the past year, the VCA Cybersecurity Advisory Practice has engaged with various clients to evaluate security maturity and operational resilience. One such client, CAIXA Cartões, collaborated with Visa to support its cybersecurity maturity assessment and prioritize risk management initiatives.

Lessandro Thomaz, Executive Director at CAIXA Cartões, stated that the partnership helped broaden the organization's strategic perspective on cybersecurity by providing structured assessments and supporting the prioritization of operational resilience initiatives.

Since its open-source release in June 2026, VVAH has recorded tens of thousands of downloads globally. Additionally, Visa has joined broader industry initiatives to support secure open-source practices, contributing VVAH to NVIDIA's Open Secure AI Alliance and collaborating on IBM and Red Hat's Project Lightwell initiative.

"As artificial intelligence transforms the digital economy, security frameworks must evolve beyond simple threat detection to actionable, rapid remediation. Visa's approach highlights a crucial shift for businesses globally: reducing the time it takes to resolve vulnerabilities is now more critical than merely identifying them. For growing enterprises and financial institutions, integrating structured risk management and open-source collaboration tools is essential to maintaining customer trust and operational resilience in an increasingly complex threat environment." — Dr. Shishir Gupta, Founder & CEO, StartupLanes