Flash Cyber ships to governments and trusted partners only
Gemini 3.5 Flash Cyber is fine-tuned for finding and fixing cybersecurity vulnerabilities and is available exclusively to governments and trusted partners under a limited-access pilot. A capability-gated tier, distributed by relationship rather than by payment, is a distribution model the industry has mostly avoided until now.
The logic is transparent and hard to argue with. A model good at finding vulnerabilities is equally good at finding them for the wrong reasons, and the gap between defensive and offensive use here is intent rather than capability. Restricting distribution is the only lever available that does not require solving intent.
It also sets a precedent worth watching. Once a lab establishes that some capabilities ship by relationship rather than by API key, the question becomes which capabilities and who decides. Those decisions are currently made internally, published as product announcements, and reviewed by nobody.
And it lands in the same week as a federal framework whose criteria are undisclosed. Two mechanisms for restricting frontier capability by trust rather than by rule, arriving together, neither observable from outside.
TechCrunch — Google releases three new Gemini models — but no 3.5 Pro → · Google Cloud — Model versions and lifecycle, Gemini Enterprise Agent Platform → · Wiley — New AI executive order addresses frontier models and cybersecurity vulnerabilities →