Visa has unveiled an upgraded Visa Vulnerability Agentic Harness (VVAH) and new advisory services to help organizations combat AI-powered cyber threats. The new framework aims to drastically reduce the time taken to remediate security vulnerabilities.

  • Visa's upgraded VVAH framework can reduce the Mean Time to Adapt (MTTA) from weeks to mere hours.
  • The framework is model-agnostic, supporting Anthropic, OpenAI, and other AI models via configuration.
  • New VCA advisory services include AI leadership education and cybersecurity maturity assessments.

SINGAPORE: In a decisive move to address the escalating complexity of digital threats, Visa (NYSE: V) has announced significant enhancements to its cybersecurity suite. As organizations grapple with the dual-edged sword of Artificial Intelligence, Visa is introducing advanced tools designed to move cybersecurity from simple discovery to rapid, validated remediation.

At the heart of this announcement is the next evolution of the Visa Vulnerability Agentic Harness (VVAH). This open-source, model-agnostic framework is engineered to slash the Mean Time to Adapt (MTTA)—the critical window between the discovery of an attack path and its resolution. With the new enhancements, Visa claims that certain remediation processes that previously took weeks can now be completed within hours.

Why This Matters

BozokMedia analysis shows that as bad actors leverage generative AI to automate attacks, traditional defense mechanisms are becoming obsolete. Visa's shift toward an AI-integrated, closed-loop remediation system represents a paradigm shift in how financial institutions must approach digital resilience to maintain consumer trust.

Identifying vulnerabilities is no longer the differentiator; the real challenge is remediating them before attackers can leverage them.

The upgraded VVAH framework introduces several key technical improvements. It features closed-loop remediation, providing structured feedback to refine fixes that fail validation. Furthermore, it offers flexible model choice, allowing organizations to deploy approved models from Anthropic or OpenAI without requiring complex code changes. This flexibility ensures that enterprises can stay current with the rapidly evolving AI landscape.

Strategic Advisory Expansion

To complement its technological tools, Visa Consulting & Analytics (VCA) is launching three new advisory services aimed at empowering leadership and operational teams:

  • AI Cyber Leadership Education: Executive-level workshops and Visa University certifications.
  • VVAH-Informed Maturity Assessment: Evaluating how effectively an organization can apply the VVAH framework.
  • Cyber Risk Prioritization & Roadmap: Strategic guidance to build long-term resilience.

Prateek Sanghi, Head of Visa Consulting & Analytics, Asia Pacific, emphasized that in the Asia Pacific region, AI is accelerating both the scale and speed of cyber threats. By combining decades of payment expertise with frontier AI insights, Visa aims to help clients focus on the risks that matter most.

Did You Know?: The VVAH framework was originally developed following Visa's involvement in Anthropic's 'Project Glasswing,' a frontier AI cybersecurity initiative.

Frequently Asked Questions

1. What is the significance of MTTA in cybersecurity?
MTTA (Mean Time to Adapt) measures the speed at which an organization responds to a vulnerability. Lowering this time is crucial to preventing successful breaches.

2. Can companies use their own AI models with VVAH?
Yes, the framework is model-agnostic, meaning it can be configured to work with various AI models, including OpenAI and Anthropic.