Visa's AI tool cuts vulnerability fix time from weeks to hours
Visa updated its AI cybersecurity framework to cut vulnerability fix time from weeks to hours, and launched new advisory services for risk prioritization.
Visa on Thursday released an update to its open-source Vulnerability Agentic Harness, an AI-powered framework that now extends from vulnerability discovery into remediation and validation, the company said in a press release. The update is designed to cut the time between identifying an attack path and fixing it, with some resolutions dropping from weeks to hours.
Originally released after Visa's participation in Anthropic's Project Glasswing, the framework helps security teams discover, triage, remediate and validate vulnerabilities within a single structured workflow. The latest release moves beyond discovery into remediation and validation, Visa said.
Visa also expanded its Consulting & Analytics Cybersecurity Advisory Practice with three new services. The services are designed to help clients assess risk and prioritize remediation efforts, the company said. The advisory services are informed by Visa's experience in AI-powered security and payments risk management.
“Across Asia Pacific, AI is accelerating both the scale of cyber threats and the speed at which vulnerabilities can be exploited,” said Prateek Sanghi, head of Visa Consulting & Analytics, Asia Pacific, in the release. “The real challenge is determining which risks matter most and remediating them before they can be leveraged by attackers. In essence, shifting focus from 'number of vulnerabilities identified' to 'Mean Time to Adapt' has become more critical than ever.”
One client, CAIXA Cartões, worked with Visa on a cybersecurity maturity assessment. Lessandro Thomaz, executive director at CAIXA Cartões, said the partnership helped broaden the company's strategic perspective on cybersecurity and provided a structured assessment of its processes. “Projects like this reinforce the importance of collaboration between financial institutions and strategic partners,” he said.
Open-Source Adoption and Industry Partnerships
Since its open-source release in June 2026, VVAH has been downloaded by tens of thousands of developers globally, Visa said. The company also joined NVIDIA's Open Secure AI Alliance and contributed VVAH as a model-agnostic framework. Visa is collaborating with IBM and Red Hat on Project Lightwell to help secure open-source software.
Visa's push into AI-powered cybersecurity comes as financial institutions face a fast-changing threat environment. The company said the new tools build on its participation in Anthropic's frontier AI initiative and decades of payments risk expertise.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.