Google has introduced Gemini 3.5 Flash Cyber, a lightweight cybersecurity model built on top of the 3.5 Flash architecture and fine-tuned to find, validate, and patch software vulnerabilities more efficiently than mainline Flash models.

The model is designed to address the bottleneck of scanning large codebases by allowing agents like CodeMender to invoke it multiple times for comprehensive analysis at a lower cost. Benchmarks show competitive performance on CyberGym and significant improvements over mainline 3.5 Flash and Claude Opus 4.6 in finding unique vulnerabilities within Google's Chrome and V8 engines.

Gemini 3.5 Flash Cyber will initially be available to governments and trusted partners via a limited-access pilot program through CodeMender, with broader availability planned for the Gemini Enterprise Agent Platform.