Visa (NYSE:V) has expanded its cybersecurity offering with an updated version of its open-source Visa Vulnerability Agentic Harness (VVAH) framework and the introduction of three advisory services through its Visa Consulting & Analytics (VCA) division.
The developments broaden Visa’s use of artificial intelligence in cybersecurity, extending VVAH beyond vulnerability detection to include remediation and validation capabilities.
VVAH adds remediation and validation capabilities
The latest version of VVAH is designed to help security teams move more quickly from identifying vulnerabilities to addressing and verifying them. Visa said some vulnerability remediation processes that previously required weeks can now be completed within hours.
New functionality includes closed-loop remediation feedback, allowing findings and corrective actions to be incorporated into the workflow. The framework also adds support for Anthropic and OpenAI models alongside other AI models.
Users can additionally choose to access real-time visibility into vulnerability scans and remediation workflows, providing greater oversight as issues move through the resolution process.
Visa Consulting adds three cybersecurity services
Alongside the VVAH update, Visa Consulting & Analytics has introduced three cybersecurity advisory services aimed at helping organisations assess and manage their security strategies.
The first, AI Cyber Leadership Education, provides executive workshops and certification courses focused on cybersecurity and artificial intelligence.
VCA is also offering a VVAH-Informed Cybersecurity Maturity Assessment, designed to evaluate an organisation’s current cybersecurity capabilities. The third service, VVAH Cyber Risk Prioritization and Roadmap, provides strategic guidance for prioritising risks and developing remediation plans.
“AI is compressing the time between vulnerability discovery and exploitation, which means defenders need a faster, more reliable path to action,” said Rajat Taneja, President of Technology at Visa.
Visa expands collaboration around open-source security
VVAH has been downloaded by tens of thousands of developers since Visa released the framework as open source in June 2026.
Visa has also joined Nvidia’s Open Secure AI Alliance, contributing VVAH as a model-agnostic framework. Separately, the company is working with IBM and Red Hat through their Project Lightwell initiative, which is focused on strengthening the security of open-source software.
These collaborations extend VVAH’s role beyond Visa’s internal cybersecurity activities and into broader industry efforts surrounding AI-assisted software security.
CAIXA Cartões uses VCA cybersecurity services
Visa also highlighted CAIXA Cartões as a customer that has used VCA’s cybersecurity advisory capabilities.
According to the company, CAIXA Cartões worked with VCA on a cybersecurity maturity assessment and risk prioritisation initiative, illustrating how the advisory services can be applied to evaluate security capabilities and establish remediation priorities.
The expanded VVAH framework and additional consulting services increase Visa’s cybersecurity capabilities as organisations consider how artificial intelligence can be incorporated into vulnerability management, remediation and broader security planning.