Global digital payments leader Visa has announced enhancements to its cybersecurity portfolio designed to help organizations identify and address vulnerabilities more effectively. The updates include the latest release of the Visa Vulnerability Agentic Harness (VVAH), an open-source and model-agnostic framework intended to improve cyber risk management.
According to Visa, the updated framework moves AI-powered cyber risk management from discovery to validated remediation. The system is designed to help organizations reduce the Mean Time to Adapt (MTTA)—the duration between the discovery and resolution of attack paths. Visa stated that some resolutions have dropped from weeks to hours using the framework.
The VVAH framework allows organizations to discover, triage, remediate, and validate vulnerabilities within a single structured workflow. Originally developed following Visa's participation in Anthropic's Project Glasswing initiative, the tool's latest iteration extends its capabilities beyond initial vulnerability discovery.
Alongside the technical framework, Visa announced the expansion of its Visa Consulting & Analytics (VCA) Cybersecurity Advisory Practice. The division is introducing three new advisory services to help clients assess risk, prioritize remediation, and strengthen operational resilience.
Prateek Sanghi, Head of Visa Consulting & Analytics for Asia Pacific, noted that the speed of vulnerability exploitation has increased alongside digital threats. He emphasized that organizations must shift their focus from the sheer number of vulnerabilities identified to reducing the time required to adapt and resolve them.
Financial institutions have begun utilizing these advisory services to evaluate their internal security measures. For instance, CAIXA Cartões worked with Visa to support its cybersecurity maturity assessment and prioritize risk management initiatives, according to Lessandro Thomaz, Executive Director at CAIXA Cartões.
Since its open-source release in June 2026, VVAH has been downloaded by developers globally. Visa has also integrated the framework into wider industry initiatives, contributing VVAH to NVIDIA's Open Secure AI Alliance and collaborating on IBM and Red Hat's Project Lightwell to support open-source software security.
"As artificial intelligence accelerates the speed at which cyber threats evolve, traditional security methods focused solely on identifying vulnerabilities are no longer sufficient. Businesses must transition toward rapid remediation and structured risk prioritization to maintain operational resilience. Frameworks that integrate discovery and resolution into a single workflow provide a practical model for organizations looking to secure digital infrastructure and protect customer trust in an increasingly complex threat landscape." — Dr. Shishir Gupta, Founder & CEO, StartupLanes
