---
title: "Government of Alberta uses Claude to find and fix cybersecurity vulnerabilities"
description: "The Government of Alberta’s Ministry of Technology and Innovation has used Claude Code with Claude Opus and Sonnet since 2025 to review, secure, and modernize systems spanning 27 provincial ministries. About 50 autonomous agents scanned 466 million lines across 3,400 repositories in roughly 20 hours, using a rules-engine first pass followed by reviews that cite exact files and lines; Alberta estimates a traditional review could take around 6.5 years. Claude Code also generated and tested fixes, wrote missing tests, and rebuilt some obsolete applications, with Ministry engineers approving patches before release. Specialized red-team and blue-team agents now run continuous checks against roughly 95 security controls, while the Alberta AI Academy trains employees and members of the public. The government plans to consolidate 185 legacy applications into 16 reusable modern applications, a future goal rather than a reported result."
---

# Government of Alberta uses Claude to find and fix cybersecurity vulnerabilities

[Anthropic](https://yomu.fyi/company/anthropic) · Jul 6, 2026

**Type:** Explainer

## Summary

The Government of Alberta’s Ministry of Technology and Innovation has used Claude Code with Claude Opus and Sonnet since 2025 to review, secure, and modernize systems spanning 27 provincial ministries. About 50 autonomous agents scanned 466 million lines across 3,400 repositories in roughly 20 hours, using a rules-engine first pass followed by reviews that cite exact files and lines; Alberta estimates a traditional review could take around 6.5 years. Claude Code also generated and tested fixes, wrote missing tests, and rebuilt some obsolete applications, with Ministry engineers approving patches before release. Specialized red-team and blue-team agents now run continuous checks against roughly 95 security controls, while the Alberta AI Academy trains employees and members of the public. The government plans to consolidate 185 legacy applications into 16 reusable modern applications, a future goal rather than a reported result.

## Context

Alberta maintains roughly 1,280 applications and 3,400 repositories for 27 provincial ministries. The source says most systems had not undergone systematic security review, while technical debt included insecure code, unaddressed bugs, outdated software, and incomplete documentation. These systems contain sensitive tax, procurement, and social-services information.

## Approach / What changed

The Ministry uses Claude Code with Opus and Sonnet models, parallel autonomous agents, a two-stage vulnerability review, generated fixes and tests, modernization of outdated applications, and specialized red-team and blue-team agents. Ministry engineers review and approve patches before release, while the Alberta AI Academy extends AI training across government and the public.

## Takeaways

- A two-stage process first uses a rules engine to flag known patterns, then has Claude review findings and cite the exact file and line so developers can verify them.
- When automated tests were missing, Claude wrote tests before patching; when applications were too outdated or complex, it rebuilt them in more modern and maintainable languages.
- Alberta’s planned modernization would analyze 185 legacy production applications and consolidate them into 16 reusable applications; the source presents this as a future goal.

**Tags:** [AI Agents](https://yomu.fyi/topic/ai-agents), [AI Security](https://yomu.fyi/topic/ai-security), [Claude Code](https://yomu.fyi/topic/claude-code), [Modernization](https://yomu.fyi/topic/modernization)

- Source: [Anthropic](https://www.anthropic.com/news/alberta-government-claude-cybersecurity)
- Source URL: https://www.anthropic.com/news/alberta-government-claude-cybersecurity
- Ingested by Yomu: 2026-09-09T11:38:00.487Z

[Read original post](https://www.anthropic.com/news/alberta-government-claude-cybersecurity)