Visa ships a security AI that patches production code before any human reviews it

Visa’s Vulnerability Agentic Harness runs an 11-stage loop that can find flaws, edit source code, and test its own patches before human review unless operators limit it to detection. The launch comes alongside an expansion of Visa Consulting & Analytics and follows recent warnings about agentic AI risks, including GhostJacking demonstrations.

Visa is betting that the security bottleneck has shifted from finding vulnerabilities to fixing and validating them quickly. But making autonomous remediation the default highlights a growing industry tension between AI-driven speed and the need for authorization gates around high-impact code or infrastructure changes.