Google DeepMind Launches Gemini 3.5 Flash Cyber for Vulnerability Management

Google DeepMind released Gemini 3.5 Flash Cyber, a lightweight, cost-efficient model built on 3.5 Flash. It is currently limited to a pilot program for government entities and trusted partners via the CodeMender AI-powered agent. The goal is to provide frontline defenders with tools to expedite vulnerability discovery and patching.

Evaluations show 3.5 Flash Cyber outperforms previous models, including Gemini 3.6 Flash and Anthropic's Claude Opus 4.6, in identifying complex vulnerabilities. In tests on the V8 JavaScript Engine, it detected 55 unique issues, including ten that no other model identified. The model has demonstrated the ability to create reliable exploits for remote code execution while bypassing standard security mitigations.

Due to the dual-use nature of the technology, Google is enforcing strict guardrails by requiring the model to run exclusively within the CodeMender ecosystem. This approach aims to prevent misuse while ensuring security teams can still access essential forensic and defensive tools. Future plans include expanding the model's scope to include紅teaming and end-to-end enterprise defense.