Global digital payments leader Visa has announced enhancements to its cybersecurity portfolio, aiming to help organizations manage cyber risks in the artificial intelligence era. The updates include the latest release of the Visa Vulnerability Agentic Harness (VVAH), an open-source, model-agnostic framework designed to shift AI-powered cyber risk management from discovery to validated remediation.
According to Visa, the updated framework helps organizations reduce the Mean Time to Adapt (MTTA)—the interval between the discovery and resolution of attack paths. The company stated that some resolutions that previously took weeks have been reduced to hours under the new workflow, which allows security teams to discover, triage, remediate, and validate vulnerabilities within a single structured process.
Originally introduced following Visa's participation in Anthropic's frontier AI cybersecurity initiative, Project Glasswing, VVAH was designed to help security teams uncover vulnerabilities, assess exploitability, and generate structured findings. The latest release extends these capabilities into the remediation and validation phases.
Alongside the VVAH update, Visa announced the expansion of its Visa Consulting & Analytics (VCA) Cybersecurity Advisory Practice. The expansion introduces three new advisory services intended to help clients assess risk, prioritize remediation efforts, and strengthen operational resilience. Prateek Sanghi, Head of Visa Consulting & Analytics for Asia Pacific, noted that the primary challenge for organizations is determining which risks require immediate attention rather than simply identifying a high volume of vulnerabilities.
Visa's advisory practice has supported various clients over the past year, including CAIXA Cartões. Lessandro Thomaz, Executive Director at CAIXA Cartões, stated that the partnership assisted the organization in evaluating its cybersecurity maturity and prioritizing risk management initiatives.
Since its open-source release in June 2026, VVAH has been downloaded by tens of thousands of developers globally. Visa has also joined broader industry initiatives, contributing VVAH to NVIDIA's Open Secure AI Alliance and collaborating with IBM and Red Hat through Project Lightwell to support open-source software security.
"As artificial intelligence accelerates both the frequency and complexity of cyber threats, businesses must transition their security strategies from mere vulnerability discovery to rapid remediation. Frameworks that integrate open-source collaboration and structured workflows help organizations address critical security gaps more efficiently. For digital businesses and financial institutions, prioritizing risk management and reducing response times are essential steps to maintaining operational resilience and customer trust." — Dr. Shishir Gupta, Founder & CEO, StartupLanes
