Google released Gemini 3.8 Flash and a security-focused version called 3.8 Flash Cyber. Both share the same underlying model, trained heavily on cybersecurity work. Google says 3.8 Flash improves on 3.7 Flash in software engineering, multi-step reasoning and agent tasks. It keeps the same introductory prices as 3.7 Flash until the end of 2026, then doubles. Google notes the model works harder and may use more tokens at higher effort settings. Developers wanting cheaper runs can lower the effort level or stay on 3.7 Flash, which remains supported. 3.8 Flash Cyber finds software flaws and writes fixes, and Google prioritised fixing over attacking. It is limited to vetted defenders through the new Fairwind Program, which requires an application. Google reports internal use across Chrome, Cloud and partners such as Wiz. Access spans the Gemini app, Search AI Mode, Google Sheets, the Gemini API and Gemini Enterprise.
What changed
Gemini 3.7 Flash was the newest Flash model, released three weeks earlier.
What it unlocks
Running longer autonomous coding and analysis tasks at Flash-level prices, and, for approved defenders, automated vulnerability finding and patching.
- $0.75/1M input, $3.75/1M output
- 54.9% on HLE-Verified
- 47.2% pass@1 on CWE-Bench
- 2.6x more correct Chrome patches
What you need to act on it
- Google AI Pro or Ultra subscription for consumer access
- Gemini API or Gemini Enterprise access for developers
- acceptance into the Fairwind Program for 3.8 Flash Cyber
Sources