Google Restricts Its Cyber-Tuned Gemini to Vetted Governments and Infrastructure Operators

Alongside Gemini 3.8 Flash, Google published the Fairwind Program, a limited-access channel through which vetted governments, operators of critical national infrastructure and software maintainers can reach Gemini 3.8 Flash Cyber. Google says the program already has more than 650 participating partners.

The Cyber variant shares the base model's weights and reasoning but carries fewer refusal safeguards around offensive security work, so it will attempt vulnerability discovery and patch generation that the general model declines. Google reports 86.2 percent on CyberGym, a benchmark that tests agents against real software vulnerabilities, up from 77.5 percent for Gemini 3.5 Flash Cyber. On Collinear's CWE-Bench, a benchmark for patching known software vulnerabilities, it reports a 47.2 percent success rate on the first attempt (pass@1), slightly below a leading frontier model at 47.8 percent, and Google's Chrome security team says the model produced 2.6 times more correct Chrome patches than larger commercial models.

Participation carries conditions. Approved organizations must confine access to internal security, incident-response or penetration-testing staff and deploy controls including multi-factor authentication. That is a capability licence, not an application programming interface (API) key, and it is administered by a company rather than a state.

The problem is structural. The same weights that patch faster also find bugs faster, and the only thing separating the two uses is a refusal policy and an approval list. Google is asserting that a corporate vetting process can hold that line. No external body audits who gets in.