Google ships Gemini 3.8 Flash and Flash Cyber

Google DeepMind released Gemini 3.8 Flash and a security-specialist sibling, Gemini 3.8 Flash Cyber, three weeks after 3.7 Flash and the third Flash release in six weeks. Pricing is unchanged from 3.7 Flash at $0.75 per million input tokens and $3.75 per million output tokens.

Both variants share the same base model. Google reports gains on DeepSWE v1.1 for long-horizon software engineering, Vals Finance Agent V2, and Harvey's Legal Agent Benchmark, plus 54.9% on HLE-Verified. The company attributes part of the improvement to training in cybersecurity, and notes a tradeoff: 3.8 Flash "works harder," taking extra reasoning steps and calling tools iteratively, so it can consume more tokens at higher effort levels. Google is keeping 3.7 Flash supported for efficiency-first workloads.

Flash Cyber is restricted to trusted defenders through a new Fairwind Program and ships with more permissive cyber mitigations. Google says it reaches frontier-level performance on CyberGym, exceeds a 70% success rate on an internal vulnerability-discovery benchmark spanning 20 languages, and scores 47.2% pass@1 on Collinear's CWE-Bench against 47.8% for a leading frontier model at significantly higher cost. Internally, Chrome Security reported 2.6x more correct patches than the best commercial models tested; Wiz measured 7.5–9.7% higher recall on its penetration-testing benchmark at 2.3–5.2x lower cost; and Google's Cloud Vulnerability Research team found a critical vulnerability in under two hours.

The post does not name Fairwind participants, the compared frontier models, or the enterprise availability details. 3.8 Flash is live via the Gemini API, AI Studio, Android Studio, Antigravity, and Stitch.