Google just shipped Gemini 3.5 Flash Cyber, a fine-tune of Gemini 3.5 Flash built specifically to find and fix software vulnerabilities. It landed on July 21, 2026 — the exact same day as Sakana AI's Fugu-Cyber, a cybersecurity-specialized variant of its Fugu orchestrator. Two and a half months earlier, on May 7, OpenAI had already shipped GPT-5.5-Cyber. Three frontier labs, three "Cyber" models, all within one summer. That's worth pausing on.
The same shape, three times
Line all three up and the pattern is obvious:
- GPT-5.5-Cyber (OpenAI, May 7): 85.6% on CyberGym, part of OpenAI's "Trusted Access for Cyber" / Daybreak initiative, restricted to vetted cybersecurity teams.
- Fugu-Cyber (Sakana AI, July 21): 86.9% on CyberGym, a specialized version of its multi-model orchestrator, gated behind a manually-reviewed access request.
- Gemini 3.5 Flash Cyber (Google, July 21): 83.2% on CyberGym — close behind GPT-5.5-Cyber despite being built on a much smaller, cheaper base model — restricted to governments and trusted partners through Google's CodeMender agent.
Every single one of these is (1) a fine-tune or specialized variant of an existing general model rather than something trained from scratch, (2) benchmarked on the same handful of security-specific evals — CyberGym above all, sometimes paired with something like CTI-REALM or ExploitGym — and (3) deliberately not shipped through the normal public API. Every lab picked the identical strategy: take the flagship, specialize it, gate it hard.
Why gate it at all
A model that's good at finding real vulnerabilities in real codebases is, by construction, also good at finding exploitable vulnerabilities to attack rather than patch. All three labs handle this the same way instead of pretending it isn't dual-use: restricted access (vetted teams, government/partner-only, or manual application review), and in Sakana's case, an explicit architectural checkpoint — a finding has to clear a human-in-the-loop verification step before it's treated as real. None of these ship as an open download or a self-serve API key.
What this says about where the race is heading
The interesting thing isn't that any one of these models is impressive — it's that "ship a hardened, gated, security-specialized variant of your flagship" has become a checklist item for a frontier lab in mid-2026, the same way "ship a reasoning mode" was a year earlier. Vulnerability discovery and patching at machine speed is becoming a capability labs compete on directly, not just a side effect of general intelligence. Worth watching whether the next wave brings this capability down-market to open-weight models, the way reasoning did — or whether "cyber" variants stay a permanently gated tier precisely because the safety story is genuinely different this time.
Links
- Announcement: Introducing Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber — Google
- Related: Fugu-Cyber — Sakana AI