Visa Unveils Major Cybersecurity Upgrades as AI Accelerates Vulnerability Exploitation

Visa has announced major enhancements to its cybersecurity portfolio, unveiling an upgraded version of its open‑source Vulnerability Agentic Harness (VVAH) and expanding its Visa Consulting & Analytics (VCA) Cybersecurity Advisory Practice with new AI‑informed services.

The company said the latest evolution of VVAH is designed to help organizations significantly reduce the Mean Time to Adapt (MTTA) — the time between discovering and resolving attack paths — with some remediation cycles shrinking from weeks to hours. “AI is compressing the time between vulnerability discovery and exploitation, which means defenders need a faster, more reliable path to action,” said Rajat Taneja, President of Technology at Visa.

Originally released after Visa’s participation in Anthropic’s Project Glasswing, VVAH demonstrated how AI could uncover vulnerabilities, assess exploitability, and generate structured findings. The new release extends that workflow into remediation and validation, offering closed‑loop feedback to refine fixes, flexible model support for Anthropic and OpenAI systems, and optional real‑time visibility into long‑running scans.

The framework is intended to help organizations discover, triage, remediate, and validate vulnerabilities within a single structured process, reducing friction between security teams and accelerating defensive action in an increasingly AI‑driven threat landscape.

To help clients operationalize these insights, Visa Consulting & Analytics introduced three new advisory offerings: AI Cyber Leadership Education, VVAH‑Informed Cybersecurity Maturity Assessments, and VVAH Cyber Risk Prioritization and Roadmaps. These services draw on Visa’s experience deploying frontier AI models for cybersecurity and its decades of payments‑sector expertise.

“Finding vulnerabilities is no longer the hardest part. Speed to remediation is the new battleground,” said Carl Rutstein, global head of Visa Consulting & Analytics. “Our enhanced advisory services help clients prioritize risk areas, act quickly, and build sustainable cyber resilience.”

Visa said its Cybersecurity Advisory Practice has supported a wide range of engagements over the past year, including work with CAIXA Cartões to assess cybersecurity maturity and strengthen operational resilience. “Cybersecurity is a fundamental pillar for customer trust and business sustainability,” said Lessandro Thomaz, Executive Director at CAIXA Cartões.

Since its open‑source release in June 2026, VVAH has been downloaded by tens of thousands of developers, reflecting growing interest in practical AI‑powered vulnerability management. Visa has also joined industry initiatives such as NVIDIA’s Open Secure AI Alliance and IBM and Red Hat’s Project Lightwell to support secure, open‑source AI development.