Google Introduces Gemini 3.5 Flash Cyber

3.5 Flash Cyber found 55 unique confirmed issues, compared to 47 found by mainline 3.5 Flash and 36 found by Opus 4.6

Google’s Cloud Vulnerability Research team used 3.5 Flash Cyber to proactively secure our systems in record time.

As part of a limited-access pilot program, 3.5 Flash Cyber will be exclusively available to governments and trusted partners via CodeMender soon, expanding over time.

As we scale the number of invocations, we find that 3.5 Flash Cyber continues to discover new code paths and vulnerabilities.

we tested 3.5 Flash Cyber on the CyberGym benchmark, which evaluates AI agents against hundreds of real-world software vulnerabilities

configuring CodeMender to call 3.5 Flash Cyber up to five times for a single, final report

By building on top of Flash, 3.5 Flash Cyber offers a cost-efficient and highly capable alternative to large, costly cybersecurity models.

Leveraging the low cost of 3.5 Flash Cyber

3.5 Flash Cyber will be exclusively available to governments and trusted partners via CodeMender soon

3.5 Flash Cyber in CodeMender is already finding and fixing vulnerabilities in Google’s internal codebases including Chrome, Android, Cloud, Ads, and YouTube.

By powering CodeMender with 3.5 Flash Cyber

introducing Gemini 3.5 Flash Cyber, our lightweight cybersecurity model built on top of 3.5 Flash

3.5 Flash Cyber significantly surpassed mainline 3.5 Flash and 3.6 Flash.

Early feedback from Wiz and Cloud CISO Security Engineering testers confirms the significant capability improvement of 3.5 Flash Cyber over the mainline 3.5 Flash model.

3.5 Flash Cyber was also evaluated on Google Chrome’s production commit scanning pipeline.

our lightweight cybersecurity model built on top of 3.5 Flash

3.5 Flash Cyber will be exclusively available to governments and trusted partners via CodeMender soon, expanding over time.