A smaller cyber model built for repeated scans

The shift is not just another larger model. Google DeepMind is testing whether a lighter, specialized model can search more code paths at lower cost. In its July 23 X post, the lab described Gemini 3.5 Flash Cyber as a model to help “spot and patch vulnerabilities” before exploitation.

“spot and patch vulnerabilities” — Google DeepMind

The linked DeepMind post says Gemini 3.5 Flash Cyber is built on top of 3.5 Flash and tuned for finding, validating, and patching software flaws. It runs through CodeMender, Google’s code-security agent, where multiple calls can examine different paths and combine the result into one report. Access is not public: DeepMind says the model will first be available to governments and trusted partners through a limited pilot.

The benchmark signal

The strongest evidence is the V8 JavaScript Engine test. Under a fixed number of invocations, Flash Cyber found 55 unique confirmed issues. Mainline Gemini 3.5 Flash found 47, while Claude Opus 4.6 found 36; 10 of the Flash Cyber findings were missed by both comparison models. DeepMind also points to CyberGym, Big Sleep evaluations, and Chrome production commit scanning as evidence that the tuned model works better than general Flash variants on security tasks.

Google DeepMind’s X account often uses short posts as pointers to deeper research or product write-ups, and this one fits that pattern. The tweet is the public signal; the linked blog supplies the deployment policy and evaluation details. The next thing to watch is whether CodeMender’s limited pilot expands beyond government and trusted-partner access, and whether Google can keep defensive workflows usable while constraining dual-use cyber capabilities.

#codemender

Gemini 3.5 Flash Cyber Finds 55 V8 Bugs as Access Stays Limited