What Is Gemini 3.8 Flash and Why Does It Have a Cyber Edition?
Google has released Gemini 3.8 Flash, the newest version of its mid-tier AI model, alongside a specialized cybersecurity variant called Gemini 3.8 Flash Cyber. The general-purpose model targets software engineering, agentic tasks, and multi-step reasoning. The Cyber model is built for finding and patching security vulnerabilities.
A workhorse that works harder
Google calls 3.8 Flash its "most intelligent workhorse model" — a significant jump from 3.7 Flash but at the same introductory price: $0.75 per million input tokens and $3.75 per million output tokens. Those rates rise to $1.50 and $7.50 in 2027.
The company's benchmark claims are specific. On DeepSWE v1.1, a long-horizon software engineering test, 3.8 Flash outperforms most larger frontier models while costing far less. On HLE-Verified, a broad reasoning benchmark across STEM, humanities, and professional fields, it scored 54.9%.
Google describes the design philosophy plainly: 3.8 Flash works harder. At higher effort levels, the model may consume more tokens to maximize performance. At lower levels, it curbs token use for compute efficiency. Developers who prioritize efficiency above all else can still use Gemini 3.7 Flash, which remains fully supported.
The Cyber variant is deliberately restricted
Gemini 3.8 Flash Cyber shares the same foundational intelligence as the standard model, accelerated by agentic loops that recursively evaluate and refine output. The difference is capability and access.
On CyberGym, an industry benchmark for autonomous vulnerability discovery, the Cyber model surpasses both 3.5 Flash Cyber and significantly larger frontier models, with a success rate above 70%. On CWE-Bench, an external patching benchmark run by Collinear, it reached a pass@1 of 47.2% — just shy of a leading frontier model's 47.8% — at considerably lower cost. Google's Chrome Security team also reported that the Cyber model produced 2.6 times more correct patches to vulnerabilities in Chrome than the best commercial models.
Because the Cyber variant carries a more permissive set of mitigations for cybersecurity work, it is not broadly available. Google is distributing it through the new Fairwind Program, which gives prioritized access to trusted government authorities, critical infrastructure operators, and software maintainers. The regular 3.8 Flash keeps safeguards against chemical, biological, radiological, nuclear, and offensive cyber misuse. Both models are protected under Google's Frontier Safety Framework.
Who gets it
Developers can build with 3.8 Flash through the Gemini API, Google AI Studio, Android Studio, and the agent-first environment Antigravity, or generate UIs in Stitch. Enterprises get access in Gemini Enterprise. Consumers with Google AI Pro or Ultra subscriptions can use it in the Gemini app, AI Mode in Google Search, and Gemini in Google Sheets.
The Wall Street Journal reported that the new model narrows the gap on coding ability with rivals. Benchmarks will decide whether that holds up in real work. For now, Google is pairing one foundational model with two very different markets: broad developer productivity and defensive security.