Google launches Gemini 3.8 Flash and its Flash Cyber twin

On September 2, Google shipped its third Flash model in six weeks: Gemini 3.8 Flash, alongside a restricted-access sibling, Gemini 3.8 Flash Cyber, purpose-built to find and patch vulnerabilities.

A Flash built for long-running agents

Gemini 3.8 Flash is the general-purpose model of the new generation: it processes text, images, audio, video and PDFs with a 1-million-token context window and up to 64,000 tokens of output. Google tuned it specifically for long-horizon coding tasks and to drive autonomous agents — the fastest-growing use case among its enterprise customers.

According to benchmarks Google published, 3.8 Flash beats its predecessor 3.7 Flash across every reported test, and outperforms Claude Opus 5 on three of them, narrowing the gap even further between "fast and cheap" models and each lab's flagship.

Flash Cyber: the twin only defenders get to see

The more consequential news isn't the standard model but its Cyber variant: a frontier-level performer at vulnerability detection and automatic patch generation, already credited with finding a 13-year-old bug in Chrome's codebase. Unlike Flash, Cyber has no general release: it's only available to "trusted defenders" through Google's new Fairwind Program, a controlled-access scheme designed to keep the same offensive capability out of the wrong hands.

Pricing: a grace window through year-end

Gemini 3.8 Flash costs $0.75 per million input tokens and $3.75 per million output tokens through December 31, 2026. Starting January 1, 2027, both prices double, to $1.50 and $7.50 respectively. This is a promotional launch structure, not the permanent steady-state price.

What it means for a company buying AI

The release cadence — three Flash versions in six weeks — is itself a signal for architecture teams: any integration built on a specific Google model needs to be designed assuming pricing and capability changes every few weeks, not every year. Pinning a production system to a version name with no migration plan is a source of silent technical debt.