Back to News
Visa, Inc.•June 11, 2026
Visa Vulnerability Agentic Harness (VVAH)
Open Source
cybersecurity
sast
ai-security
devsecops
### TL;DR
Visa Vulnerability Agentic Harness (VVAH) is an open-source, agentic SAST (Static Application Security Testing) pipeline designed for autonomous vulnerability discovery, remediation, and validation. Built on learnings from Anthropic's Project Glasswing, it leverages frontier AI models to systematically map attack surfaces, verify exploitability, and propose validated fixes.
Key Insights & Metrics
Pricing
Free & Open-Source
Cost structure
Version
N/A
Current release version
Hardware
Python 3.10+ and access to LLM APIs (Anthropic or OpenAI-compatible backends)
Compute requirements
Category
Open Source
Licensing model
Region
United States
Primary region
Key Features
- Autonomous eleven-stage pipeline for end-to-end vulnerability discovery, remediation, and validation
- Multi-model support via vendor-neutral abstraction, compatible with Anthropic Claude and OpenAI
- Adversarial verification panel to score fix quality and reduce false positives
- Structured output in Markdown and SARIF 2.1.0 formats for seamless integration
- Threat-aware design utilizing business context and attack surface mapping
Discussion
0
Upvotes
0
Downvotes
0 reviews
Sign in to leave a review
Reviews
No reviews yet. Be the first to review!