Google’s DeepMind has introduced Gemini 3.5 Flash Cyber, an advanced AI model designed to swiftly identify, validate, and remediate software vulnerabilities. This model builds upon the existing 3.5 Flash framework, offering a more efficient and cost-effective solution for cybersecurity challenges.
Initially, Gemini 3.5 Flash Cyber will be accessible exclusively to governmental bodies and select partners through CodeMender, an AI-driven tool for vulnerability detection and patching that debuted in October 2025. This strategic rollout aims to provide frontline defenders with a proactive edge in addressing critical security flaws before they can be exploited.
DeepMind emphasizes the model’s lightweight nature, which allows for rapid and repeated deployment at a lower cost compared to larger, more resource-intensive cybersecurity models. This efficiency enables CodeMender to analyze extensive codebases more thoroughly, enhancing the detection of potential vulnerabilities.
Performance evaluations reveal that Gemini 3.5 Flash Cyber outperforms its predecessors, Gemini 3.5 Flash and 3.6 Flash, in uncovering new vulnerabilities. Notably, tests on complex platforms like Google Chrome and Apple Safari demonstrated its superior capability, identifying a greater number of unique issues, including some that other models overlooked.
In practical applications, the model has successfully detected remote code execution vulnerabilities in public APIs and identified memory-corruption flaws in sensitive production services. Impressively, it has also developed reliable exploits that circumvent standard security measures such as Address Space Layout Randomization (ASLR) and Write XOR Execute (W^X).
Beyond the pilot program, Google plans to integrate CodeMender’s core functionalities into the Gemini Enterprise Agent Platform, making these advanced capabilities more widely available to customers. This initiative underscores Google’s commitment to providing scalable and affordable solutions to bolster software security.
The introduction of Gemini 3.5 Flash Cyber marks a significant advancement in AI-driven cybersecurity. By equipping trusted entities with this powerful tool, Google aims to enhance the proactive detection and mitigation of software vulnerabilities, thereby strengthening the overall security landscape.
