RRepoGEO

REPOGEO REPORT · LITE

visa/visa-vulnerability-agentic-harness

Default branch main · commit dc7d7766 · scanned 6/22/2026, 10:07:02 PM

GitHub: 533 stars · 89 forks

AI VISIBILITY SCORE
22 /100
Critical
Category recall
0 / 2
Not recommended in any query
Rule findings
1 pass · 1 warn · 0 fail
Objective metadata checks
AI knows your name
1 / 3
Direct prompts that named your repo
HOW TO READ THIS REPORT

Action plan is what to do next — copy-pasteable changes prioritized by impact. Category visibility is the real GEO test: when a user asks an AI a brand-free question that should surface visa/visa-vulnerability-agentic-harness, does the AI actually recommend you — or your competitors? Objective checks verify the metadata signals AI engines weight first. Self-mention check detects whether AI even knows you exist by name.

Action plan — copy-paste fixes

3 prioritized changes generated by gemini-2.5-flash. Mark items done after you ship the fix.

OVERALL DIRECTION
  • hightopics#1
    Add specific topics to improve AI categorization

    Why:

    COPY-PASTE FIX
    vulnerability-discovery, sast, ai-security, agentic-ai, llm-security, security-research, threat-modeling, vulnerability-management, code-analysis
  • highreadme#2
    Strengthen README opening and repository description for category clarity

    Why:

    CURRENT
    # Visa Vulnerability Agentic Harness — Agentic SAST Pipeline

VVAH is Visa's open-source harness for autonomous vulnerability discovery using frontier AI models, built on learnings from Project Glasswing (Anthropic's initiative for AI-assisted vulnerability research).
    COPY-PASTE FIX
    Update the repository description to: 'An open-source AI-powered SAST harness for autonomous vulnerability discovery and accelerated triage, built on learnings from Project Glasswing.' Then, update the README's first paragraph to: '# Visa Vulnerability Agentic Harness (VVAH) — AI-Powered SAST for Autonomous Vulnerability Discovery

VVAH is Visa's open-source **AI-powered Static Application Security Testing (SAST) harness** for autonomous vulnerability discovery using frontier AI models, built on learnings from Project Glasswing (Anthropic's initiative for AI-assisted vulnerability research). It focuses on accelerating vulnerability triage and improving SAST pipeline accuracy.'
  • mediumhomepage#3
    Add a homepage URL to the repository metadata

    Why:

    COPY-PASTE FIX
    Set the repository homepage URL to `https://github.com/visa/visa-vulnerability-agentic-harness` (or a dedicated project page if one exists).

Category GEO backends resolved for this scan: google/gemini-2.5-flash, deepseek/deepseek-v4-flash

Category visibility — the real GEO test

Brand-free queries asked to google/gemini-2.5-flash. Did AI recommend you, or someone else?

Same questions for every model — switch tabs to compare answers and rankings.

Recall
0 / 2
0% of queries surface visa/visa-vulnerability-agentic-harness
Avg rank
—
Lower is better. #1 = top recommendation.
Share of voice
0%
Of all named tools, what % are you?
Top rival
Snyk Code
Recommended in 2 of 2 queries
COMPETITOR LEADERBOARD
  1. Snyk Code · recommended 2×
  2. DeepCode AI · recommended 2×
  3. github/codeql · recommended 1×
  4. Checkmarx SAST (CxSAST) · recommended 1×
  5. Veracode Static Analysis · recommended 1×
  • CATEGORY QUERY
    How can I use AI models to autonomously discover security vulnerabilities in my code?
    you: not recommended
    AI recommended (in order):
    1. Snyk Code
    2. GitHub Advanced Security (CodeQL) (github/codeql)
    3. Checkmarx SAST (CxSAST)
    4. Veracode Static Analysis
    5. DeepCode AI
    6. Soteria
    7. Snyk Open Source

    AI recommended 7 alternatives but never named visa/visa-vulnerability-agentic-harness. This is the gap to close.

    Show full AI answer
  • CATEGORY QUERY
    What solutions improve SAST pipeline accuracy and accelerate vulnerability triage with AI?
    you: not recommended
    AI recommended (in order):
    1. Snyk Code
    2. Checkmarx SAST (CxSAST) with CxAI
    3. Veracode Static Analysis (SAST) with AI/ML
    4. HCL AppScan Static Analyzer (SAST) with AI
    5. Fortify Static Code Analyzer (SCA) with Fortify Insight
    6. CodeQL
    7. DeepCode AI

    AI recommended 7 alternatives but never named visa/visa-vulnerability-agentic-harness. This is the gap to close.

    Show full AI answer

Objective checks

Rule-based audits of metadata signals AI engines weight most.

  • Metadata completeness
    warn

    Suggestion:

  • README presence
    pass

Self-mention check

Does AI even know your repo exists when asked about it directly?

  • Compared to common alternatives in this category, what is the core differentiator of visa/visa-vulnerability-agentic-harness?
    pass
    AI did not name visa/visa-vulnerability-agentic-harness — likely talking about a different project

    AI answers can be confidently wrong. Read for accuracy: does it match your actual tech stack, audience, and differentiator?

  • If a team adopts visa/visa-vulnerability-agentic-harness in production, what risks or prerequisites should they evaluate first?
    pass
    AI named visa/visa-vulnerability-agentic-harness explicitly

    AI answers can be confidently wrong. Read for accuracy: does it match your actual tech stack, audience, and differentiator?

  • In one sentence, what problem does the repo visa/visa-vulnerability-agentic-harness solve, and who is the primary audience?
    pass
    AI did not name visa/visa-vulnerability-agentic-harness — likely talking about a different project

    AI answers can be confidently wrong. Read for accuracy: does it match your actual tech stack, audience, and differentiator?

Embed your GEO score

Drop this badge into the README of visa/visa-vulnerability-agentic-harness. It auto-updates whenever the report is rescanned and links back to the latest report — easy public proof that you care about AI discoverability.

RepoGEO badge previewLive preview
MARKDOWN (README)
[![RepoGEO](https://repogeo.com/badge/visa/visa-vulnerability-agentic-harness.svg)](https://repogeo.com/en/r/visa/visa-vulnerability-agentic-harness)
HTML
<a href="https://repogeo.com/en/r/visa/visa-vulnerability-agentic-harness"><img src="https://repogeo.com/badge/visa/visa-vulnerability-agentic-harness.svg" alt="RepoGEO" /></a>
Pro

Subscribe to Pro for deep diagnoses

visa/visa-vulnerability-agentic-harness — Lite scans stay free; this card itemizes Pro deep limits vs Lite.

  • Deep reports10 / month
  • Brand-free category queries5 vs 2 in Lite
  • Prioritized action items8 vs 3 in Lite