Government of Alberta Uses Claude to Detect and Fix Cybersecurity Vulnerabilities

Alberta's Ministry of Technology and Innovation is strengthening government system security using Claude Code along with the Claude Opus and Sonnet models. In just 20 hours, the team scanned 466 million lines of code to uncover security vulnerabilities, infrastructure weaknesses, and documentation gaps. This is work that would have taken approximately 6.5 years using traditional methods.

Claude goes beyond simply finding vulnerabilities and also performs the following roles:

• Vulnerability fixing and modernization: It fixes discovered security flaws, writes test code directly, and rewrites outdated code in modern languages when needed. For example, it rebuilt a 25-year-old Java-based grant portal in just 4-5 days.
• Continuous security review: Specialized agents built on the Claude Agent SDK check security throughout the development process.
  • Red Team agent: Investigates applications from an external attacker's perspective and maps out vulnerability exploitation paths.
  • Blue Team agent: Evaluates defense systems against international security standards and drafts concrete remediation plans.

The Government of Alberta is sharing this experience in a technical white paper, presenting a model for securing public services at scale through AI.