← all releases
Visa, Inc.·Jun 11, 2026·rolling·open source

Visa Vulnerability Agentic Harness (VVAH)

Visa Vulnerability Agentic Harness (VVAH) is an open-source, agentic SAST (Static Application Security Testing) pipeline designed for autonomous vulnerability discovery, remediation, and validation. Built on learnings from Anthropic's Project Glasswing, it leverages frontier AI models to systematically map attack surfaces, verify exploitability, and propose validated fixes.

cybersecuritysastai-securitydevsecops
overview

Visa Vulnerability Agentic Harness (VVAH) is an open-source, agentic SAST (Static Application Security Testing) pipeline designed for autonomous vulnerability discovery, remediation, and validation. Built on learnings from Anthropic's Project Glasswing, it leverages frontier AI models to systematically map attack surfaces, verify exploitability, and propose validated fixes.

key features
  • 01Autonomous eleven-stage pipeline for end-to-end vulnerability discovery, remediation, and validation
  • 02Multi-model support via vendor-neutral abstraction, compatible with Anthropic Claude and OpenAI
  • 03Adversarial verification panel to score fix quality and reduce false positives
  • 04Structured output in Markdown and SARIF 2.1.0 formats for seamless integration
  • 05Threat-aware design utilizing business context and attack surface mapping
related productsbrowse all →