Visa Updates Cybersecurity Portfolio with New Agentic Harness Release and Consulting Services

Global digital payments leader Visa has announced new enhancements to its cybersecurity portfolio, designed to help organizations identify and fix vulnerabilities more effectively as they navigate an AI-driven threat landscape. The updates include the latest release of the Visa Vulnerability Agentic Harness (VVAH), an open-source, model-agnostic framework, alongside expanded advisory services from Visa Consulting & Analytics (VCA).

According to Visa, the new VVAH release shifts AI-powered cyber risk management from discovery to validated remediation. Originally launched following Visa's participation in Anthropic's Project Glasswing frontier AI cybersecurity initiative, the framework was initially used by security teams to uncover vulnerabilities and generate structured findings. The updated framework now extends that workflow to include discovery, triage, remediation, and validation within a single structured process.

Visa stated that the framework helps organizations reduce the Mean Time to Adapt (MTTA)—the duration between the discovery of an attack path and its resolution. In some cases, resolution times have decreased from weeks to hours.

Complementing the technology update, Visa Consulting & Analytics has introduced three new cybersecurity advisory services. These services are intended to help clients assess risk, prioritize remediation efforts, and strengthen operational resilience. VCA's Cybersecurity Advisory Practice has previously supported multiple clients, including CAIXA Cartões, which worked with Visa to evaluate cybersecurity maturity and prioritize risk management initiatives.

Prateek Sanghi, Head of Visa Consulting & Analytics for Asia Pacific, noted that across the region, AI is accelerating both the scale of threats and the speed of exploitation. He emphasized that the primary challenge is determining which risks require immediate attention rather than simply counting the total number of vulnerabilities identified.

Since its open-source release in June 2026, VVAH has been downloaded by tens of thousands of developers globally. Additionally, Visa has joined industry initiatives, contributing VVAH to NVIDIA's Open Secure AI Alliance as a model-agnostic framework and collaborating through IBM and Red Hat's Project Lightwell initiative to support the security of open-source software.

"As artificial intelligence accelerates the frequency and sophistication of cyber threats, organizations must move beyond traditional vulnerability discovery and focus on rapid remediation. Visa's integration of agentic workflows into open-source frameworks highlights a necessary industry shift toward reducing response times and operationalizing security insights efficiently. For businesses navigating digital transformation, prioritizing actionable risk management is no longer optional; it is fundamental to maintaining customer trust and long-term economic stability." — Dr. Shishir Gupta, Founder & CEO, StartupLanes