Visa expands AI cybersecurity tools to cut remediation time
- Visa enhances its open-source VVAH framework to reduce vulnerability remediation time from weeks to hours
- New advisory services launched to help clients assess risk and prioritize cyber resilience efforts
- VVAH supports flexible model choice including Anthropic and OpenAI models via configuration
- Tens of thousands of developers have downloaded VVAH since its June 2026 release
- Visa joins industry alliances with NVIDIA, IBM, and Red Hat to advance secure AI practices

*this image is generated using AI for illustrative purposes only.
Visa Inc (NYSE: V) announced enhancements to its cybersecurity portfolio, including an updated version of its open-source Visa Vulnerability Agentic Harness (VVAH) framework and new advisory services from Visa Consulting & Analytics.
The latest release of VVAH aims to significantly reduce the Mean Time to Adapt (MTTA), the duration between vulnerability discovery and resolution. According to Visa, some resolutions have shrunk from weeks to hours.
Expanding VVAH Capabilities
Originally released following Visa’s participation in Anthropic’s Project Glasswing, VVAH helps security teams uncover vulnerabilities, assess exploitability, and generate structured findings. The latest release extends this workflow beyond discovery into remediation and validation.
Key enhancements include:
- Closed-loop remediation: Structured feedback helps teams refine fixes that fail validation without restarting the process.
- Flexible model choice: Organizations can deploy approved Anthropic and OpenAI models, or any other AI model through configuration rather than code changes.
- Greater visibility: Optional real-time progress views provide transparency into long-running scans and remediation workflows.
New Cybersecurity Services
Visa Consulting & Analytics introduced three new advisory services informed by Visa’s experience in AI-powered security:
- AI Cyber Leadership Education: Executive workshops and certification courses led by Visa specialists.
- VVAH-Informed Cybersecurity Maturity Assessment: Helps organizations apply the VVAH framework to identify vulnerabilities and prioritize remediation.
- VVAH Cyber Risk Prioritization and Roadmap: Provides strategic guidance for evaluating findings and developing long-term risk management roadmaps.
What the Numbers Show
The operational impact of the VVAH update is significant in terms of time efficiency. By reducing resolution times from weeks to hours, Visa is addressing the core bottleneck in modern cybersecurity: speed to remediation. This shift suggests that while vulnerability discovery is becoming commoditized through AI, the competitive advantage lies in automated, validated fix deployment.
Industry Adoption
Since its open-source release in June 2026, VVAH has been downloaded by tens of thousands of developers globally. Visa recently joined NVIDIA’s Open Secure AI Alliance, contributing VVAH as a model-agnostic framework, and collaborated with IBM and Red Hat’s Project Lightwell initiative to secure open-source software.
CAIXA Cartões worked with Visa on a cybersecurity maturity assessment to prioritize risk management initiatives. Lessandro Thomaz, Executive Director at CAIXA Cartões, noted the partnership helped broaden their strategic perspective on cybersecurity.
How might Visa's shift toward automated, validated fix deployment impact the competitive landscape for traditional cybersecurity vendors?
What are the potential liability implications for organizations adopting Visa's open-source VVAH framework if AI-generated remediation codes introduce new vulnerabilities?
Could Visa's expansion into cybersecurity advisory services create a conflict of interest or competitive tension with its existing payment processing partners?

































