Two models shipped on the same day, built on the same intelligence. One you can buy today. The other you have to apply for, and Google decides.

Gemini 3.8 Flash is a general release at $0.75 per million input tokens. Gemini 3.8 Flash Cyber finds software vulnerabilities and writes the patches, clears 70% on real world vulnerability discovery, and is reachable only through a new scheme called the Fairwind Program: governments, national cyber authorities, operators of hospitals, power grids and payment systems, and the maintainers of widely used software.

Why this one is different

The model is not the story. The gate is. Three weeks earlier OpenAI did the same thing with GPT-5.6-Cyber and its Daybreak Red tier, and the day before this, OpenAI rated its own Astra model Critical for cyber and said the strongest capabilities would go to vetted partners only. Three labs, three separate application processes, the same conclusion reached independently: a model good enough to find zero-day flaws is good enough to use them, and the only control anybody has is who gets an account.

The model is not the story. The gate is.

How we got here

1. 10 Aug 2026OpenAI announces GPT-5.6-Cyber, built on Sol for finding zero-days, behind an applicant-vetted tier called Daybreak Red.
2. 1 Sep 2026OpenAI rates Astra Critical for cybersecurity under its own Preparedness Framework and says the strongest capabilities will be gated.
3. 2 Sep 2026Google ships 3.8 Flash Cyber behind the Fairwind Program. Same shape, different name, and no shared standard for who qualifies.

What it does and does not mean

What this does not establish is who decides. There is no shared definition of a trusted defender, no appeal if a lab says no, and no reciprocity: clearing Fairwind tells you nothing about clearing Daybreak. A hospital group approved by one and refused by the other has no recourse and no explanation. What it does establish is that vendor gatekeeping is now the actual security policy for frontier cyber capability, arrived at by three companies separately and written down by no regulator.