Visa upgrades open-source AI cybersecurity testing framework and adds advisory services

Visa is broadening its cybersecurity toolkit, introducing an updated version of its open-source Visa Vulnerability Agentic Harness (VVAH) framework and unveiling three new advisory services, according to a report published Tuesday by Yahoo Finance.

The VVAH framework is described as an open-source approach built to support AI-assisted security work, with the core idea of using agentic techniques to help test or evaluate potential weaknesses in systems. In its latest update, Visa says it has refreshed the framework, indicating an effort to keep the tool aligned with evolving cybersecurity and AI practices.

Alongside the VVAH update, Visa also introduced three advisory services. The report says these services are offered through Visa, positioning them as consultancy-style support for organizations looking to apply AI-related security methods more effectively. The company did not provide, in the report, specific details on which functions the advisers will perform, how engagement timelines will work, or what deliverables customers receive.

In its announcement, Visa framed the move as part of its broader push to bring more structured tooling and guidance into cybersecurity, particularly as AI becomes more embedded across enterprise environments. The company’s payments business means it has long stakes in fraud prevention, risk management, and resilience, areas that often overlap with cybersecurity controls.

Still, the specifics of the three advisory services were not laid out in the post summarized by Yahoo Finance. Without additional detail, it remains unclear whether they focus on vulnerability discovery, incident readiness, security operations optimization, compliance support, or vendor selection for AI security products.

For the market, Visa’s step looks like a continuation of a wider industry trend in which payment networks and large financial institutions try to productize parts of their security knowledge. By packaging an open-source framework like VVAH and pairing it with paid advisory services, the company is effectively combining public developer access with a commercial path for organizations that want hands-on guidance.

Visa’s approach also suggests a strategy to meet demand from two sides: technical teams that can experiment with or extend open-source tooling, and leadership teams that prefer guided engagements. Open-source frameworks can lower barriers to experimentation, while advisory services can translate outcomes into operational changes.

What Visa did not disclose in the reported announcement is also notable. The report did not include any pricing, contract length, customer names, case studies, or quantified results tied to VVAH or the advisory services. It also did not specify whether the advisory offerings are new teams within Visa, partners, or a mix of internal and third-party expertise.