Visa Updates Cybersecurity Portfolio with New AI Tools and Advisory Services

SINGAPORE — Visa has announced updates to its cybersecurity portfolio, aimed at helping organisations identify and fix vulnerabilities more effectively as they navigate an AI-driven threat landscape. The company unveiled the latest evolution of the Visa Vulnerability Agentic Harness (VVAH), an open-source, model-agnostic framework designed to assist organisations in reducing the Mean Time to Adapt (MTTA).

According to Visa, the update shifts AI-powered cyber risk management from mere discovery to validated remediation. While the initial release followed Visa's participation in Anthropic's Project Glasswing to help security teams uncover vulnerabilities and assess exploitability, the latest version extends that workflow into remediation and validation within a single structured framework. The company reports that the framework helps organisations discover, triage, remediate, and validate vulnerabilities, with some resolutions reportedly shrinking from weeks to hours.

Alongside the VVAH update, Visa introduced three new cybersecurity advisory services through its Visa Consulting & Analytics (VCA) Cybersecurity Advisory Practice. These services are designed to help clients assess risk, prioritise remediation efforts, and strengthen operational resilience.

Prateek Sanghi, Head of Visa Consulting & Analytics for Asia Pacific, noted that AI is accelerating both the scale of cyber threats and the speed of vulnerability exploitation in the region. He stated that the primary challenge is determining which risks matter most rather than simply identifying a large number of vulnerabilities, emphasizing the importance of reducing the Mean Time to Adapt.

Over the past year, the VCA Cybersecurity Advisory Practice has supported various clients, including CAIXA Cartões, which worked with Visa on cybersecurity maturity assessments and risk management initiatives. Lessandro Thomaz, Executive Director at CAIXA Cartões, highlighted that the partnership assisted in providing a structured assessment of process maturity and prioritizing resilience initiatives.

Since its open-source release in June 2026, VVAH has been downloaded by tens of thousands of developers globally. Visa has also joined industry initiatives, contributing VVAH as a model-agnostic framework to NVIDIA's Open Secure AI Alliance and collaborating on software security through IBM and Red Hat's Project Lightwell initiative.

"As artificial intelligence accelerates the speed at which digital threats evolve, organisations must shift their focus from merely identifying security vulnerabilities to rapidly remediating them. Visa's approach highlights a crucial operational shift for businesses today: reducing the time between threat discovery and resolution is essential for maintaining customer trust and operational resilience. For the broader technology and enterprise ecosystem, adopting structured, automated frameworks will become a fundamental requirement to manage complex cyber risks effectively in an AI-driven era." — Dr. Shishir Gupta, Founder & CEO, StartupLanes