Global digital payments leader Visa has announced new enhancements to its cybersecurity portfolio aimed at helping organizations identify, prioritize, and remediate vulnerabilities more effectively. The update features the next evolution of the Visa Vulnerability Agentic Harness (VVAH), an open-source, model-agnostic framework designed to streamline cyber risk management.
According to Visa, the latest VVAH release shifts AI-powered cyber risk management from discovery to validated remediation. The framework is built to help security teams discover, triage, remediate, and validate vulnerabilities within a single structured workflow. By utilizing this approach, organizations can significantly reduce the Mean Time to Adapt (MTTA)—the duration between the discovery of an attack path and its resolution—with certain resolutions shrinking from weeks to hours.
Alongside the VVAH update, Visa announced the expansion of its Visa Consulting & Analytics (VCA) Cybersecurity Advisory Practice. The expansion introduces three new advisory services intended to help clients assess risk, prioritize remediation efforts, and strengthen operational resilience. These services are informed by Visa's experience in AI-powered security and build on frameworks initially explored during the company's participation in Anthropic's Project Glasswing initiative.
Prateek Sanghi, Head of Visa Consulting & Analytics for Asia Pacific, noted that the scale and speed of cyber threats have accelerated alongside the adoption of AI in the region. He emphasized that identifying vulnerabilities is no longer the primary differentiator for organizations, but rather determining which risks require immediate remediation before bad actors can exploit them.
The advisory practice has actively supported various financial institutions over the past year. For instance, CAIXA Cartões worked with Visa to evaluate its cybersecurity maturity, assess risk areas, and prioritize operational resilience initiatives. Lessandro Thomaz, Executive Director at CAIXA Cartões, stated that the partnership has helped broaden the institution's strategic perspective on cybersecurity and structured its risk management processes.
Since its open-source launch in June 2026, VVAH has been downloaded by tens of thousands of developers globally. Visa has also integrated the framework into wider industry efforts, contributing VVAH to NVIDIA's Open Secure AI Alliance and collaborating on software security through IBM and Red Hat's Project Lightwell initiative.
Visa operates as a digital payments network facilitating transactions across more than 200 countries and territories, connecting consumers, merchants, financial institutions, and government entities.
"As artificial intelligence continues to transform digital landscapes, businesses face both unprecedented efficiencies and accelerated cybersecurity risks. Visa's integration of AI into vulnerability management highlights a crucial shift for modern enterprises: moving beyond mere vulnerability discovery to rapid, validated remediation. For growing companies and financial institutions alike, reducing the time between identifying a threat and resolving it is vital for maintaining customer trust and long-term business resilience." — Dr. Shishir Gupta, Founder & CEO, StartupLanes
