Global digital payments leader Visa has announced enhancements to its cybersecurity portfolio, introducing new tools and advisory services designed to help organizations manage cyber risks in an environment increasingly shaped by artificial intelligence.
As part of the update, Visa released the latest version of its open-source, model-agnostic framework, the Visa Vulnerability Agentic Harness (VVAH). Originally introduced following Visa's participation in Anthropic's Project Glasswing frontier AI initiative, the framework is designed to assist security teams in moving cyber risk management from discovery to validated remediation.
According to Visa, the updated framework integrates discovery, triage, remediation, and validation into a single structured workflow. The company stated that this approach aims to reduce the Mean Time to Adapt—the timeframe between identifying an attack path and resolving it—with certain resolutions dropping from weeks to hours.
Alongside the framework update, Visa Consulting & Analytics (VCA) has expanded its Cybersecurity Advisory Practice with three new advisory services. These offerings are structured to help clients assess risk, prioritize remediation efforts, and enhance operational resilience.
Prateek Sanghi, Head of Visa Consulting & Analytics for Asia Pacific, noted that the velocity of cyber threats has increased alongside the adoption of AI. He emphasized that the primary challenge for organizations is no longer just identifying vulnerabilities, but determining which risks require immediate attention and resolving them before they can be exploited.
Visa's VCA Cybersecurity Advisory Practice has previously supported multiple clients, including CAIXA Cartões, which worked with the firm to evaluate its cybersecurity maturity and prioritize risk management initiatives. Lessandro Thomaz, Executive Director at CAIXA Cartões, stated that the collaboration helped broaden the institution's strategic perspective on process maturity and operational resilience.
Since its open-source release in June 2026, VVAH has been downloaded by developers globally. Additionally, Visa has joined broader industry security initiatives, contributing VVAH as a model-agnostic framework to NVIDIA's Open Secure AI Alliance and collaborating on IBM and Red Hat's Project Lightwell initiative to support open-source software security.
Visa operates as a global digital payments network, facilitating transactions across more than 200 countries and territories between consumers, merchants, financial institutions, and government entities.
"The integration of AI into cybersecurity workflows highlights a critical shift in how organizations handle digital threats. As demonstrated by Visa's latest developments, the focus is moving rapidly from the volume of vulnerabilities discovered to the speed and accuracy of remediation. For businesses navigating today's digital landscape, operational resilience depends heavily on prioritizing high-risk vulnerabilities and shortening the time it takes to resolve them effectively." — Dr. Shishir Gupta, Founder & CEO, StartupLanes
