Visa open-sources its vulnerability agent harness

Visa has open-sourced its fifth-generation Vulnerability Agentic Harness after Anthropic’s Project Glasswing participants found more than 10,000 high- or critical-severity vulnerabilities in widely used software during the first month, according to Visa’s security briefing. The harness now covers discovery, remediation and validation, while Visa says humans still review findings and approve remediation paths. Security teams should treat it as a reference for governed defensive agents, alongside the archive’s case for routing security work deliberately, not a license to let a scanner patch production unreviewed.