Visa Updates Cybersecurity Portfolio with New Agentic Harness Release and Advisory Services

SINGAPORE — Visa has announced enhancements to its cybersecurity portfolio aimed at helping organisations identify and resolve vulnerabilities more effectively. The updates include the latest release of the Visa Vulnerability Agentic Harness (VVAH), an open-source, model-agnostic framework designed to streamline cyber risk management.

According to the company, the new VVAH release shifts AI-powered cyber risk management from discovery to validated remediation. The framework is built to help organisations reduce the Mean Time to Adapt (MTTA), measuring the time between the discovery of an attack path and its resolution. Visa stated that some resolutions have dropped from weeks to hours using the updated workflow.

Originally introduced following Visa's involvement in Anthropic's frontier AI cybersecurity initiative, Project Glasswing, VVAH initially focused on uncovering vulnerabilities and assessing exploitability. The latest iteration extends this capability to cover discovery, triage, remediation, and validation within a single structured workflow.

To support clients in operationalising these security insights, Visa Consulting & Analytics (VCA) has expanded its Cybersecurity Advisory Practice. The division introduced three new advisory services intended to help clients assess risk, prioritise remediation efforts, and build resilience against emerging threats.

Prateek Sanghi, Head of Visa Consulting & Analytics for Asia Pacific, noted that AI has accelerated both the scale of cyber threats and the speed of vulnerability exploitation. He emphasized that shifting the focus from the total number of vulnerabilities identified to reducing the Mean Time to Adapt has become critical for organisations.

Over the past year, the VCA Cybersecurity Advisory Practice has engaged with multiple clients to evaluate maturity levels and operational resilience. For instance, CAIXA Cartões worked with Visa to support its cybersecurity maturity assessment and prioritize risk management initiatives.

Lessandro Thomaz, Executive Director at CAIXA Cartões, stated that the partnership helped broaden the institution's strategic perspective on cybersecurity by providing structured maturity assessments for its processes.

Since its open-source release in June 2026, VVAH has recorded tens of thousands of downloads globally by developers. Visa has also joined broader industry initiatives, contributing VVAH to NVIDIA's Open Secure AI Alliance and collaborating on IBM and Red Hat's Project Lightwell initiative to help secure open-source software.

"As artificial intelligence scales up the speed and sophistication of cyber threats, traditional vulnerability discovery is no longer enough for modern enterprises. The focus must shift directly toward execution and remediation speed, specifically minimizing the time it takes to resolve identified risks. Visa's approach of combining open-source developer frameworks with structured consulting advisory services highlights how large financial entities are systematically addressing operational resilience in an evolving digital economy." — Dr. Shishir Gupta, Founder & CEO, StartupLanes