Google DeepMind shipped Gemini 3.8 Flash and a companion Gemini 3.8 Flash Cyber SKU on 2 September 2026 — the third Flash release in six weeks, after 3.7 Flash landed in mid-August. The cadence looks less like a traditional flagship cycle and more like a continuous deployment pipeline on Google's cost tier: same introductory pricing, faster iteration, and a split between a general workhorse model and a defender-only cyber variant.

Gemini 3.8 Flash is the public SKU — aimed at long-horizon coding, agentic workflows and multi-step reasoning. Google cites its DeepSWE v1.1 software-engineering results and a 54.9% score on HLE-Verified, plus domain benchmarks including Vals Finance Agent V2 and Harvey's Legal Agent Benchmark. It is available in Google AI Studio, the Gemini API, Android Studio, Stitch, Gemini Enterprise, and the Gemini app for AI Pro and Ultra subscribers.

Pricing holds at $0.75 per million input tokens and $3.75 per million output tokens through 31 December 2026 — unchanged from the 3.7 Flash introductory window — then doubles to $1.50 / $7.50 from 1 January 2027. But the headline price needs a footnote: Google says 3.8 Flash "works harder" on hard tasks, running extra reasoning steps and iterative tool calls, which can mean more tokens burned per task. Google explicitly says 3.7 Flash remains supported for efficiency-first workloads.

Gemini 3.8 Flash Cyber is the more interesting half of the story — and the harder one to get. It is a separate, more permissive cyber SKU for vulnerability discovery and automated patching: Google cites above-70% success on its internal 20-language CyberGym vulnerability suite and 47.2% pass@1 on CWE-Bench (versus a cited leading frontier model at 47.8%). But it is not in the open model catalog. Distribution runs through Google's Fairwind Program, gated for vetted defenders — government authorities, infrastructure operators and software maintainers.

The pattern across vendors is unmistakable: frontier cyber assistance now ships through gates, not storefront SKUs. OpenAI's Astra cybersecurity capabilities sit behind its Daybreak trusted-access program, and Google's Cyber variant sits behind Fairwind. For most developers, the actionable story is the general 3.8 Flash — a coding and agent upgrade at Flash economics — with a clear warning that "same price per token" is not the same as "same bill per job."

Sources