Visa

Payment network operating across 200+ countries and territories, moving money in roughly 160 currencies, connecting nearly 5 billion payment credentials to more than 175 million merchant locations (visa-mythos-glasswing).

The spoke’s first defender at critical-infrastructure scale — distinct from its security vendors (intezer) and its consortia (akrites-oss-ai-threats). Visa is the party that owns the consequences, which is why its choices are worth more than a vendor’s recommendations.

What it has contributed to this corpus:

• visa-vulnerability-agentic-harness — Apache-2.0, the pipeline that governed its Mythos hunt, published as a reference implementation (fifth generation internally).
• mean-time-to-adapt — a metric invented to replace ones it judged misleading.
• A white paper with 12 non-negotiable architectural practices, including “AI agents are identities.”

rajat-taneja (president of technology) and CISO Subra Kumaraswamy co-authored the 10 June 2026 announcement. Visa has also joined Project Lightwell, the $5bn IBM/Red Hat open-source hardening initiative, with Bank of America, JPMorganChase, Goldman Sachs and Mastercard.

Taneja’s framing of how the network is defended — “pessimism and paranoia,” assuming failure and designing around it — is zero-trust stated as temperament rather than architecture.

Related

visa-vulnerability-agentic-harness · visa-mythos-glasswing · rajat-taneja · project-glasswing · mean-time-to-adapt · zero-trust