What are the strengths of this model?

Builds on 3.8 Flash's 1M context and multimodal base, specialized for security Tuned for autonomous vulnerability discovery and automated patching Gated to governments and critical-infrastructure defenders via Fairwind — responsible distribution Same $0.75/$3.75 intro pricing as 3.8 Flash

What are the weaknesses of this model?

No general availability; Fairwind vetting is a prerequisite before production use Built on 3.8 Flash, so it trails top models on the hardest general agentic tests Security-specialized scope limits its usefulness on general-purpose tasks Access restrictions mean essentially no independent public benchmarks yet

What are the best use cases?

Autonomous vulnerability scanning and prioritization for governments and critical infrastructure Drafting patch proposals and automated remediation Embedding as an agent inside existing security pipelines Defensive operations on the same 3.8 Flash API infrastructure

Google DeepMindProprietary

Gemini 3.8 Flash Cyber

Name: Gemini 3.8 Flash Cyber
Author: Google DeepMind

Compare this model

Gemini 3.8 Flash Cyber is a security-focused variant of Google DeepMind's Gemini 3.8 Flash, released September 2, 2026 alongside the base Flash model. It builds on the same 1,048,576-token context and multimodal architecture and is tuned for autonomous vulnerability discovery and automated patching. Access is gated behind the Fairwind program and restricted to governments and critical-infrastructure defenders rather than being generally available. It inherits 3.8 Flash's introductory $0.75/$3.75 per-million-token pricing.

Share:X Hatena LINE

Parameters

Undisclosed

Context Window

License

Proprietary

Release Date

2026-09-02

API Pricing

Input Price (per 1M tokens)

$0.75

Output Price (per 1M tokens)

$3.75

Billing Mode: standard

Strengths

•Builds on 3.8 Flash's 1M context and multimodal base, specialized for security
•Tuned for autonomous vulnerability discovery and automated patching
•Gated to governments and critical-infrastructure defenders via Fairwind — responsible distribution
•Same $0.75/$3.75 intro pricing as 3.8 Flash

Weaknesses

•No general availability; Fairwind vetting is a prerequisite before production use
•Built on 3.8 Flash, so it trails top models on the hardest general agentic tests
•Security-specialized scope limits its usefulness on general-purpose tasks
•Access restrictions mean essentially no independent public benchmarks yet

Use Cases

•Autonomous vulnerability scanning and prioritization for governments and critical infrastructure
•Drafting patch proposals and automated remediation
•Embedding as an agent inside existing security pipelines
•Defensive operations on the same 3.8 Flash API infrastructure

Deep Analysis

Base model

Gemini 3.8 Flash

GA September 2, 2026; 1,048,576-token context, 65,536 output

Focus

Autonomous vulnerability discovery & automated patching

Defensive cybersecurity, not general coding

Access

Fairwind Program

Governments and critical-infrastructure operators only

Pricing

$0.75 / $3.75 per 1M

Shared with 3.8 Flash; doubles January 1, 2027

CyberGym

Frontier-level (vendor-claimed)

Vulnerability-discovery benchmark; independent replication pending

Strengths

・Google's first model purpose-built for defensive cyber work, not just general-purpose coding
・Gated behind the Fairwind Program, keeping the most dangerous capability out of the open API
・Inherits 3.8 Flash's cost-efficient agentic coding (Terminal-Bench 2.1 90.8%) and 1M-token context

Weaknesses

・Reachable only through a vetting program — most teams cannot use it yet
・Cyber-capability benchmarks remain vendor-reported; independent replication is outstanding
・Shares 3.8 Flash's January 1, 2027 price doubling, which can raise real cost ~40%

Competitor Comparison

Model	Arena	Price
GPT-6 Astra	Critical cyber tier	$10/$50
Claude Mythos 5.1	Cyber via Claude Security (invitation)	$10/$50
Gemini 3.8 Flash Cyber	Fairwind Program	$0.75/$3.75

Overview

Gemini 3.8 Flash Cyber, released September 2, 2026 alongside Gemini 3.8 Flash, is Google DeepMind's first model built specifically for defensive cybersecurity — autonomous vulnerability discovery and automated patching — rather than general-purpose coding. Google is making it available only through the new Fairwind Program to governments and critical-infrastructure operators, a gating pattern that mirrors the trusted-access tiers OpenAI and Anthropic used for their own high-capability cyber models the same week. It inherits 3.8 Flash's economical agentic coding (Terminal-Bench 2.1 90.8%) and 1,048,576-token context, priced at the same $0.75/$3.75 per million tokens (doubling January 1, 2027). Google reports frontier-level results on the CyberGym vulnerability-discovery benchmark; independent verification is outstanding. The move signals that the three leading US labs now treat offensive-grade cyber skill as too sensitive for open release.

Benchmarks & Performance

As a derivative of Gemini 3.8 Flash, 3.8 Flash Cyber carries the base model's published coding numbers — 73.7% on DeepSWE v1.1, 90.8% on Terminal-Bench 2.1 — and layers domain tuning for security workflows. Google states frontier-level performance on CyberGym for vulnerability discovery; exact figures and methodology have not been independently replicated. No public HLE, GPQA, or general-reasoning scores are separated out for the Cyber variant.

Detailed Comparison

Against GPT-6 Astra (OpenAI's 'Critical' cyber tier, $10/$50, trusted access + Daybreak) and Claude Mythos 5.1 (Anthropic's permissive-safeguard variant behind a trusted-access program, $10/$50, powering Claude Security), Gemini 3.8 Flash Cyber is the cheapest to run at $0.75/$3.75 but the most narrowly scoped — defensive cyber only, not a general agent. All three share the same week's theme: the strongest cyber capability ships gated, not open. Astra and Mythos reach broader enterprise via paid tiers; 3.8 Flash Cyber is restricted to vetted government and infrastructure partners.

Community Feedback

Reaction among security practitioners has been cautious-positive: the gating is read as responsible, but the lack of open access means independent red-teaming will be slow. Some researchers noted the irony that three frontier labs all chose to withhold offensive cyber skill within days of each other, suggesting regulatory or internal-risk pressure rather than purely technical limits. The Fairwind Program's eligibility criteria were not fully detailed at launch.

Use Cases

1. Defensive vulnerability discovery — continuously scan first-party codebases and infrastructure for unknown flaws, prioritizing by exploitability. 2. Automated patching — generate and test fixes for discovered vulnerabilities inside isolated pipelines. 3. Critical-infrastructure protection — government and operator teams use it under the Fairwind Program for threat modeling and remediation at scale. Teams outside the program should treat it as unavailable and plan around 3.8 Flash for general coding.

Latest News

September 2, 2026 — Google DeepMind announced Gemini 3.8 Flash and Gemini 3.8 Flash Cyber together. The Cyber variant is offered through the Fairwind Program to governments and critical-infrastructure operators. Pricing matches 3.8 Flash ($0.75/$3.75 per 1M, doubling January 1, 2027). Same-day coverage noted frontier-level CyberGym results. No general API access at launch.

Sources

Analysis generated: 2026-09-05