Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities
Google has launched Gemini 3.5 Flash Cyber, a specialized AI model designed to rapidly identify and fix software vulnerabilities. This AI model, accessible only to governments and trusted partners through CodeMender, significantly outperforms other models in finding unique vulnerabilities, including a 100% reliable remote code execution exploit. The release is part of a limited-access pilot program aimed at bolstering cybersecurity defenses.
Google's DeepMind announced the release of Gemini 3.5 Flash Cyber, a specialized AI model built to quickly discover and patch software vulnerabilities. This AI model will be exclusively available to governments and trusted partners via CodeMender as part of a limited-access pilot program. CodeMender is an AI-powered agent for vulnerability discovery and patching that was unveiled by the company in October 2025.
DeepMind conducted evaluations and found 3.5 Flash Cyber to outperform Gemini 3.5 Flash and 3.6 Flash when it comes to unearthing new vulnerabilities in codebases. Stress-testing on complex projects like Google Chrome and Apple Safari revealed it to have "significantly" surpassed other models.
"3.5 Flash Cyber consistently discovered more unique vulnerabilities compared with 3.5 Flash and Claude Opus 4.6," DeepMind noted. "When tested on the highly complex V8 JavaScript Engine across a fixed number of invocations, Gemini 3.5 Flash Cyber found 55 unique confirmed issues, compared to 47 found by Gemini 3.5 Flash and 36 found by Opus 4.6, including 10 issues that no other model caught."
DeepMind also tested the model on public APIs and a memory-corruption vulnerability in a sensitive production service, discovering a 100% reliable remote-code execution exploit that bypassed standard mitigation techniques like Address Space Layout Randomization (ASLR) and Write XOR Execute (W^X).
Google is separately bringing CodeMender's foundational capabilities directly to customers with generally available Gemini models through the Gemini Enterprise Agent Platform. "By powering CodeMender with 3.5 Flash Cyber, we're providing a highly capable, scalable, and affordable architecture designed to help more defenders secure software," Google added.