New Detail
Visa Expands Support for its Clients and the Industry as Organisations Navigate New AI Era of Cybersecurity
27/08/2026
Latest Visa Vulnerability Agentic Harness release moves AI-powered cyber risk management from discovery to validated remediation
New services from Visa Consulting & Analytics help clients identify the vulnerabilities that matter most and act before bad actors do
London, August 27, 2026 — Visa (NYSE: V) today announced enhancements to its cybersecurity portfolio to help organisations identify and fix vulnerabilities more effectively. Unveiling the next evolution of the Visa Vulnerability Agentic Harness (VVAH), its open-source, model-agnostic framework, Visa is helping organisations significantly reduce the Mean Time to Adapt (MTTA), the time between discovery and resolution of attack paths, with some resolutions shrinking from weeks to hours.
And to help clients navigate this evolving threat landscape, Visa also announced the expansion of its Visa Consulting & Analytics (VCA) Cybersecurity Advisory Practice with new advisory services designed to help clients assess risk, prioritise remediation efforts and strengthen resilience in an evolving threat environment.
"AI is compressing the time between vulnerability discovery and exploitation, which means defenders need a faster, more reliable path to action," said Rajat Taneja, President, Technology, Visa. "By advancing VVAH and expanding our cybersecurity advisory capabilities, we're helping organisations move from insight to validated remediation while strengthening resilience in an increasingly AI-driven threat landscape."
Expanding VVAH
Originally released following Visa's participation in Anthropic's frontier AI cybersecurity initiative, Project Glasswing, VVAH demonstrated how AI can help security teams uncover vulnerabilities, assess exploitability and generate structured findings. The latest release extends that workflow beyond discovery into remediation and validation.
Key enhancements include:
Closed-loop remediation: Structured feedback helps teams refine fixes that fail validation without restarting the process.
Flexible model choice: Organisations can now deploy approved Anthropic models, OpenAI models, in addition to any other AI model through configuration rather than code changes.
Greater visibility: Optional real-time progress views provide additional transparency into long-running scans and remediation workflows.
The framework is designed to help organisations discover, triage, remediate and validate vulnerabilities within a single structured workflow.
New Cybersecurity Services
To help organisations operationalise those insights, Visa Consulting & Analytics is introducing three new cybersecurity advisory services informed by Visa's experience in AI-powered security:
AI Cyber Leadership Education – Executive workshops, trainings and Visa University certification courses led by Visa's AI and cybersecurity specialists, sharing lessons from Visa’s experience with frontier AI cybersecurity, helping leaders prepare for an increasingly AI-driven threat environment.
VVAH-Informed Cybersecurity Maturity Assessment – Helps organisations apply VVAH framework to identify and evaluate potential vulnerabilities, understand areas of risk and prioritise remediation efforts.
VVAH Cyber Risk Prioritisation and Roadmap – Provides strategic guidance to help organisations evaluate findings, prioritise remediation efforts, and develop a long-term cyber risk management roadmap.
“As AI accelerates both cyber attacks and cyber risk discovery, organisations need visibility, but also practical actions that can speed up remediation,” said Claudio Di Nella, Head of Visa Consulting and Analytics, Visa Europe. “Our enhanced cybersecurity advisory services combine insights from Project Glasswing, our open-source VVAH assets and our deep payments expertise in Europe to help organisations focus on the risks that matter most, strengthen their response capabilities, and build resilience that can keep pace with the evolving AI-driven threat environment.”
Growing Momentum Across the Security Community
Since its open-source release in June 2026, VVAH has been downloaded by tens of thousands of developers across the world, reflecting growing interest in practical AI-powered vulnerability management. Visa also recently joined industry initiatives to further support the development of safe, secure and open practices as frontier AI continues to evolve. As a part of NVIDIA’s Open Secure AI Alliance, Visa is contributing VVAH as a model-agnostic framework, and through IBM and Red Hat’s Project Lightwell initiative, Visa is collaborating with other organisations to help secure open-source software.