Gemini 3.8 Flash Cyber

CurrentLatest

Gemini 3.8 Flash Cyber is Google's September 2, 2026 defensive-security variant of Gemini 3.8 Flash, gated through the Fairwind Program for trusted government authorities, critical-infrastructure operators, and software maintainers.

View provider docs Try it →

Provider

Google

Model family

Google Gemini

Cybersecurity LLM

Cost tier

Flash Cyber

Status

Current

Release Sep 2, 2026

Why teams choose it

🧠

Google reports CyberGym frontier-level autonomous discovery and CWE-Bench pass@1 of 47.2…

% vs 47.8% for a larger leading frontier model.

📎

Chrome Security reported 2.6× more correct Chrome patches than the best larger commercia…

l models in Google's write-up.

⚙️

Public 3.8 Flash keeps tighter cyber-offense mitigations; Cyber is more permissive and t…

Public 3.8 Flash keeps tighter cyber-offense mitigations; Cyber is more permissive and therefore Fairwind-only.

Tradeoffs to know

No public self-serve API or published list price; apply through Fairwind.
Not a substitute for Gemini 3.8 Flash on general coding or consumer Gemini surfaces.
Vendor cyber scores are harness-specific; remeasure on your language mix.

When not to use this

Not ideal for sprawling research or brittle multi-hop reasoning unless you constrain scope tightly.
Avoid for regulated or high-stakes outputs without evaluations that mimic your tooling, data, and review process.
Promote traffic to heavier tiers inside the family when workflows need richer tools and longer horizons.

Technical specs

Inputs: text, image
Outputs: text
Capabilities: vulnerability discovery, automated patching, defensive cybersecurity, code review
License: Proprietary API (Fairwind Program)
Model string: gemini-3-8-flash-cyber

Benchmarks

{
  "source": "https://blog.google/innovation-and-ai/models-and-research/gemini-models/3-8-flash-and-3-8-flash-cyber/",
  "vendor_reported": true,
  "cwe_bench_pass_at_1": 47.2
}