Visa today announced enhancements to its cybersecurity portfolio to help organizations identify and fix vulnerabilities more effectively. Unveiling the next evolution of the Visa Vulnerability Agentic Harness (VVAH), its open-source, model-agnostic framework, Visa is helping organizations significantly reduce the Mean Time to Adapt (MTTA), the time between discovery and resolution of attack paths, with some resolutions shrinking from weeks to hours.
Visa also announced the expansion of its Visa Consulting & Analytics (VCA) Cybersecurity Advisory Practice with new advisory services designed to help clients assess risk, prioritize remediation efforts and strengthen resilience in an evolving threat environment.
Originally released following Visa's participation in Anthropic's frontier AI cybersecurity initiative, Project Glasswing, VVAH demonstrated how AI can help security teams uncover vulnerabilities, assess exploitability and generate structured findings. The latest release extends that workflow beyond discovery into remediation and validation.
Key enhancements include closed-loop remediation where structured feedback helps teams refine fixes that fail validation without restarting the process, flexible model choice allowing organizations to deploy approved Anthropic models and OpenAI models in addition to any other AI model through configuration rather than code changes, and greater visibility with optional real-time progress views providing additional transparency into long-running scans and remediation workflows. The framework is designed to help organizations discover, triage, remediate and validate vulnerabilities within a single structured workflow.
"AI is compressing the time between vulnerability discovery and exploitation, which means defenders need a faster, more reliable path to action," said Rajat Taneja, President, Technology, Visa. "By advancing VVAH and expanding our cybersecurity advisory capabilities, we're helping organizations move from insight to validated remediation while strengthening resilience in an increasingly AI-driven threat landscape."
To help organizations operationalize those insights, Visa Consulting & Analytics is introducing three new cybersecurity advisory services informed by Visa's experience in AI-powered security: AI Cyber Leadership Education with executive workshops and Visa University certification, VVAH-Informed Cybersecurity Maturity Assessment to identify and evaluate potential vulnerabilities, and VVAH Cyber Risk Prioritization and Roadmap providing strategic guidance for long-term management.
"Finding vulnerabilities is no longer the hardest part. Speed to remediation is the new battleground. When AI-enabled attackers move faster and probe at scale, companies need AI-powered defenses," said Carl Rutstein, global head of Visa Consulting & Analytics. "Our enhanced cybersecurity advisory services combine insights from implementing frontier AI models for cybersecurity, VVAH, and decades of payments expertise."
Over the past year, VCA Cybersecurity Advisory Practice supported clients including CAIXA Cartões on maturity assessment and prioritization. Since its open-source release in June 2026, VVAH has been downloaded by tens of thousands of developers.
About Visa
Visa is a world leader in digital payments, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories. Our mission is to connect the world through the most innovative, convenient, reliable and secure payments network, enabling individuals, businesses and economies to thrive. We believe that economies that include everyone everywhere, uplift everyone everywhere and see access as foundational to the future of money movement.
