Itaú Unibanco, Brazil's largest bank, rolled out Devin across its software development lifecycle. Cognition reports a .NET to Java migration of 59 services 6x faster at 5x lower cost, ~70% of scanner-flagged vulnerabilities resolved automatically, and test coverage raised from ~50% to ~90+%.
Reported outcomes
Outcomes are reported exactly as stated by the source; we have not independently audited them.
How it works
- Devin performs code migrations (.NET to Java, SQL Server objects).
- Automatically fixes vulnerabilities flagged by SonarQube, Fortify, and Veracode.
- Generates tests to raise coverage.
Risks & compliance
- Agent-written code requires review
- Vendor-published results
Tools mentioned & how to build it
Disclosure: Some links may earn us a commission; it never affects grades. Tools are listed by fit to this case, never by payment.
Tools mentioned
- Devin (Cognition)
Autonomous AI software engineer from Cognition.
Build a version yourself
- n8n
Open-source workflow automation with AI agent nodes; self-host or cloud. - Relevance AI
Build an 'AI workforce' of agents, e.g. BDR agents that research and book meetings.
Sources
“~70% of vulnerabilities from SonarQube/Fortify/Veracode resolved automatically.”How Itaú Deployed AI Across the SDLC at Global-Finance Scale
Grade rationale: Named organization with a quantified outcome from the vendor or the organization itself (self-reported). Automated check on Oct 17, 2026: 1/1 quotes and 3/3 outcome claims matched the source. Compiled by the Agent Casefile research desk (AI-assisted; see methodology). Spot an error? Request a correction.
