Google releases Gemini 3.8 Flash Cyber: limited to government and enterprise defenders via Fairwind program
Google DeepMind released Gemini 3.8 Flash Cyber on September 11, a cybersecurity-specialized model restricted to vetted government and enterprise defenders via the Fairwind program, already in use by Chrome, Wiz, and Cloud.
On September 11, Google DeepMind released Gemini 3.8 Flash Cyber, a cybersecurity-specialized model fine-tuned from Gemini 3.8 Flash, focused on automated vulnerability discovery, validation, and patching.
The Cyber model scores above 3.5 Flash Cyber on CyberGym Pass@1, supports autonomous bug-finding across codebases in roughly 20 languages, and produces verified patches. Google's Chrome team, security firm Wiz, and Google Cloud have already deployed it internally in production vulnerability triage workflows.
On availability, Gemini 3.8 Flash Cyber is not broadly released. Access is restricted to a small group of vetted government and trusted enterprise security teams through Google's new Fairwind program. The approach mirrors OpenAI's earlier move to limit Astra to vetted cybersecurity customers via the Daybreak program, suggesting the industry is converging on permissioned access as the default posture for models capable of automated vulnerability discovery.
In parallel, the flagship Gemini 3.8 Flash is priced at $0.75 per million input tokens and $3.75 per million output tokens, targeting the lower-cost mid-tier developer and enterprise market. With three Flash-tier releases in six weeks, Google is treating its lower-cost tier as the primary battleground for developer and enterprise adoption.