

Application security teams are facing increasing code complexity, growing volumes of findings, and the challenge of separating signal from noise. The Visa Vulnerability Agentic Harness (VVAH) is an open-source agentic application security framework designed to help organizations operate AppSec at AI speed from vulnerability discovery and validation to remediation.
In this session, we will take a technical deep dive into the architecture behind VVAH, lessons learned from real-world evaluations, and the techniques that have demonstrated the greatest impact on vulnerability detection. Attendees will learn how VVAH leverages context-aware analysis, multi-agent orchestration, verification workflows, and remediation validation to help security teams identify higher-quality findings and scale application security efforts more effectively.