Google shipped Gemini 3.8 Flash on Wednesday and, more quietly, gated Gemini 3.8 Flash Cyber behind a new trusted-defenders-only program called Fairwind. That makes three frontier labs in three days — Anthropic’s Mythos 5.1, OpenAI’s Astra, now Google — running the same release template this column asked about this morning: a broad model in everyone’s hands, a high-cyber twin only behind a queue.
The cyber twin is no longer a two-lab experiment
What happened. Google released Gemini 3.8 Flash on September 2 (model ID gemini-3.8-flash; GA across AI Studio and the Gemini Enterprise Agent Platform, $0.75/$3.75 per million tokens through December 31, then $1.50/$7.50), three weeks after 3.7 Flash. Alongside it, Gemini 3.8 Flash Cyber — explicitly not on general release — goes to vetted defenders through the new Fairwind Program: governments and national cyber authorities, critical-infrastructure operators, and core technology platforms, with applicants vetted and roughly 650 partners including CrowdStrike, Palo Alto Networks, and Snowflake. Google’s own numbers put the Flash-tier Cyber variant above larger rivals — Claude Mythos 5 and GPT-5.6 Sol — on autonomous vulnerability discovery, citing 47.2% pass@1 on CWE-Bench and 2.6x more correct Chrome patches than leading commercial models.
Why it matters. The 11:00 edition’s open question was whether gating sharp capabilities is a two-lab pattern or becomes the industry norm; an answer landed the same day. Daybreak Blue (OpenAI), Project Glasswing (Anthropic), and now Fairwind mark the gated high-cyber twin as the default release shape at three of four frontier labs, on the day the frontier’s own yardstick dropped its first Critical grade. For an operator the changes are concrete: a third vetting on-ramp to map if your organization sits in the defender bucket, and — if Google’s benchmark claims survive independent re-runs — a cheap-tier model matching flagship cyber performance, which reprices who you task with autonomous vulnerability work. Note the orientation difference: Google describes its variant as defense-first (patching prioritized over exploitation), the first of the three gates sold as a defender tool rather than a capability with safeguards installed after the fact.
What I’m watching
The scorecard is now independent re-runs, the same way Astra’s ExploitBench number awaits a system card: if both hold, autonomous vulnerability discovery is simultaneously a bought, gated commodity and a Flash-tier price point. And since each lab built its own queue, the gate inventory is itself worth tracking — Daybreak Blue, Glasswing, Fairwind: three on-ramps, three sets of terms, no shared standard, which is a governance gap all by itself. The plain 3.8 Flash is The-Rest class and belongs in a fuller edition; the Cyber gate is the story.
Source: blog.google, thehackernews.com