Visa has unveiled enhancements to its cybersecurity portfolio to assist organisations in discovering and addressing security flaws as artificial intelligence accelerates the threat landscape.
The latest release of the Visa Vulnerability Agentic Harness (VVAH), an open-source, model-agnostic framework aimed at significantly reducing the Mean Time to Adapt (MTTA)—the duration between discovering and resolving attack paths—shrinking certain resolution timeframes from weeks to hours.
Originally established following Visa's involvement in Anthropic's Project Glasswing initiative, VVAH initially assisted security teams in identifying vulnerabilities, evaluating exploitability, and generating structured findings.
The new iteration advances this workflow beyond discovery into remediation and validation. Key technical enhancements include closed-loop remediation to refine failed fixes without restarting workflows, flexible model configuration supporting approved Anthropic and OpenAI models, and real-time progress views for greater transparency during scans.
Alongside the framework enhancements, Visa expanded its Visa Consulting & Analytics (VCA) Cybersecurity Advisory Practice. The practice has introduced three dedicated advisory services: AI Cyber Leadership Education conducted through executive workshops and Visa University certifications, VVAH-Informed Cybersecurity Maturity Assessments, and VVAH Cyber Risk Prioritisation and Roadmap development.
"Across Asia Pacific, AI is accelerating both the scale of cyber threats and the speed at which vulnerabilities can be exploited. In this environment, identifying vulnerabilities is no longer the differentiator. The real challenge is determining which risks matter most and remediating them before they can be leveraged by attackers. In essence, shifting focus from 'number of vulnerabilities identified' to 'Mean Time to Adapt' has become more critical than ever," said Prateek Sanghi, head of Visa Consulting & Analytics, Asia Pacific.
"By combining insights from Project Glasswing, VVAH, and decades of payments and risk expertise, we help clients focus remediation efforts where they will have the greatest impact, strengthen resilience, and stay ahead of an increasingly complex threat landscape." Prateek Sanghi
Since its June 2026 launch, VVAH has achieved tens of thousands of downloads globally. Visa is also participating in broader industry security initiatives, contributing VVAH to NVIDIA's Open Secure AI Alliance and collaborating with IBM and Red Hat on Project Lightwell.
