❯ Google ships Gemini 3.8 Flash and Flash Cyber, the latter only to vetted Fairwind partners

two modelsGoogle released Gemini 3.8 Flash, its third Flash model in six weeks, holding pricing at $0.75 per million input tokens, and says it beats Claude Opus 5 and GPT-5.6 Sol on some benchmarks. Alongside it came Gemini 3.8 Flash Cyber for finding and patching vulnerabilities, available only to vetted organizations through the new Fairwind Program.

scores and gatekeepingPer Google, on CyberGym — a benchmark testing AI agents against real-world software vulnerabilities — 3.8 Flash Cyber scored 86.2% against 77.5% for the previous 3.5 Flash Cyber, and Google’s Chrome security team generated 2.6 times as many correct patches with it as with the larger commercial models tested. Fairwind currently spans more than 650 partners globally, including CrowdStrike, Datadog, Palo Alto Networks and Snowflake, with priority to critical infrastructure operators and maintainers of widely used software. Participants must restrict access to security, incident response and penetration testing staff, enable multi-factor authentication, and confine use to authorized threat simulation, reverse engineering and malware analysis.

tiered release becomes the normThe notable part is not the benchmark but how it shipped: same company, same day, one model with a price and one with an admissions process. It is a variant of what Z.ai did last week in swapping GLM-5.3’s license to require a security review from $10 billion-revenue hosts. Enterprises buying security-capable models now face qualification rather than a price list, and the more capable the model, the harder it is to simply purchase. Ethan Mollick’s read on 3.8 Flash stayed measured: a very good Flash model, but not equivalent to a frontier model.

▪ SIGNALTwo models in one day, one priced and one vetted — offensive-capable AI is turning from a product into a license.