{"type":"raw_signal","id":"nr-c4a1-visa-vulnerability-agentic-harness","slug":"visa-vulnerability-agentic-harness","title":"Visa expands an agentic vulnerability harness","description":"Visa's VVAH is queued as a governed security-evaluation signal for agents, targets, tasks, scoring, and reproducibility.","observed_at":"2026-09-02T12:02:23.106Z","record_date":"2026-09-02","date_kind":"observed_at","why_it_matters":"That structure matters because security agents are easy to overstate. A harness can make the difference between permissioned evaluation and unsafe operational folklore. The next signal to watch is whether VVAH-style artifacts become reproducible enough for external teams to compare agents without exposing real targets or exploit paths.","novelty":"new","verification_level":"source-inspected","signal_type":"newsroom_basket_signal","source_platform":"multi-source-public","topics":["security","evals","agents","benchmarks"],"entities":["Visa"],"related_patterns":[],"source_url":"https://github.com/visa/visa-vulnerability-agentic-harness","source_urls":["https://github.com/visa/visa-vulnerability-agentic-harness","https://corporate.visa.com/en/sites/visa-perspectives/newsroom/visa-vulnerability-agentic-harness-expanded.html"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"signal:visa-vulnerability-agentic-harness","retrieval_nugget":"Visa's VVAH is queued as a governed security-evaluation signal for agents, targets, tasks, scoring, and reproducibility. Visa's Vulnerability Agentic Harness is recorded as a governed-evaluation signal. The useful shape is a harness that separates the agent under test, the vulnerability task, the target environment, scoring, and the governance boundary. That structure matters because security agents are easy to overstate. A","status":"published","visuals":[{"role":"hero","src":"/images/drip/visa-vulnerability-agentic-harness/visa-vvah-agentic-harness.webp","alt":"Whiteboard harness map connecting an agent under test, vulnerability task, target environment, scoring gate, governance boundary, and repo artifacts.","caption":"New Runtime synthesis: VVAH frames vulnerability work as a governed evaluation harness."}],"routes":{"html":"https://newruntime.com/signals/visa-vulnerability-agentic-harness/","markdown":"https://newruntime.com/signals/visa-vulnerability-agentic-harness.md","json":"https://newruntime.com/signals/visa-vulnerability-agentic-harness.json"}}