Google Releases Gemini 3.8 Flash and a Cybersecurity Variant Limited to Governments
Google has released Gemini 3.8 Flash and Gemini 3.8 Flash Cyber, its third Flash release in six weeks, with the cyber model restricted to trusted testers and governments. Under the EU AI Act, every general purpose model placed on the market carries documentation, copyright, and training data obligations.
September 2, 2026 – 8:33 pm
Key Takeaways:
- Two Variants: A general model (Gemini 3.8 Flash) and a cybersecurity variant (Gemini 3.8 Flash Cyber), the latter replacing the 3.5 version.
- Pricing: Introductory pricing until end of the year: $0.75 per million input tokens and $3.75 output, reducing to $1.50 and $7.50 afterward.
- European Compliance: Each release is a compliance event under Article 53, requiring technical documentation, copyright policy, and training data summary for general purpose models.
- Systemic Risk Notification: Models trained above 10 to the 25th floating point operations must be notified to the Commission within two weeks (Article 52).
- Limited Distribution: Flash Cyber is only available to trusted testers and governments, with Google not disclosing which governments.
Details:
- Flash Cyber boasts a 2.6x improvement in patch accuracy for the Chrome team and claims to find critical vulnerabilities in two hours, according to internal Google metrics.
- The security variant raises questions due to its limited distribution, especially as Google hasn’t specified which governments are involved.
- Despite improvements, Flash models remain smaller than the Pro line and lag behind competitors like Claude Opus in agentic computer use.
By Ana Maria Constantin, an expert in digital marketing, product management, and branding & identity, who focuses on developing strategies for the software/SaaS industry.