# How is Itaú using the Devin coding agent across its software lifecycle?

> Itaú Unibanco, Brazil's largest bank, rolled out Devin across its software development lifecycle. Cognition reports a .NET to Java migration of 59 services 6x faster at 5x lower cost, ~70% of scanner-flagged vulnerabilities resolved automatically, and test coverage raised from ~50% to ~90+%.

- **Evidence grade:** B — Named organization with a quantified outcome, from the vendor or the organization's own announcement.
- **Organization:** Itaú Unibanco (bank)
- **Industry:** Banking & Financial Services — Bank (Brazil)
- **Roles:** Software Engineering
- **Tools:** Devin (Cognition)
- **Status:** production · **Agent pattern:** autonomous-agent · **Autonomy:** 2/4
- **Last verified:** 2026-10-17

## Reported outcomes
- service migration: 59 services migrated 6x faster at 5x lower cost [1] (self-reported)
- vulnerability remediation: ~70% resolved automatically [1] (self-reported)
- test coverage: from ~50% to ~90+% [1] (self-reported)

## How it works
1. Devin performs code migrations (.NET to Java, SQL Server objects).
2. Automatically fixes vulnerabilities flagged by SonarQube, Fortify, and Veracode.
3. Generates tests to raise coverage.

## Risks & compliance
- Agent-written code requires review
- Vendor-published results

## Sources
1. Cognition (Devin), "How Itaú Deployed AI Across the SDLC at Global-Finance Scale" (undated; accessed 2026-10-17) <https://devin.ai/customers/itau>
   > "~70% of vulnerabilities from SonarQube/Fortify/Veracode resolved automatically."

Canonical: https://agentcasefile.com/cases/itau-devin-sdlc-agents/ · License: CC BY 4.0 (summary) · Source: Agent Casefile