Google announced Gemini 3.8 Flash and a Cyber version for trusted cyber defenders. Standard Flash targets a balance of speed, reasoning, and price for agent workflows. Flash Cyber focuses on defensive work such as vulnerability discovery and automated patching, with access through the Fairwind program. Google cautions that the new Flash may use more reasoning steps and tokens on complex requests, so the same list price does not guarantee the same cost per task. Read Google’s announcement and evaluations.

Official image for Gemini 3.8 Flash 发布，Cyber 版本采用受信任访问
Official image from Google; click to open the original source.

Flash and Flash Cyber serve different users

Gemini 3.8 Flash is intended for general API and product use. Google lists introductory rates of $0.75 per million input tokens and $3.75 per million output tokens. Cyber is a trusted-access version with expanded cybersecurity capability, not a general model every user can select. Fairwind is intended to let vetted defenders test vulnerability discovery, code analysis, and repair suggestions in authorized environments. Calling a task “defensive” is not permission to scan an unapproved system or conduct offensive work.

Why complex jobs need a fresh cost calculation

Flash pricing is unchanged in the comparison, but Google says 3.8 Flash may reason through difficult questions in more steps. In addition to input and output length, tool calls, retries, and longer reasoning affect the bill. An older or more efficient setting may suit simple classification and extraction. For multi-step planning and tool use, compare the total cost of a successful task rather than the price per million tokens.

Run a migration evaluation

  1. Save a baseline of current Flash requests, including prompts, tool permissions, input size, latency, tokens, and success rate.
  2. Run 3.8 Flash under the same conditions, grouping short requests, complex reasoning, and agent tool calls.
  3. Compare first-pass success and human review time. Watch for usage increases on difficult tasks.
  4. If approved for Cyber access, use only authorized test systems. Require findings to include evidence, reproduction steps, and a proposed fix, then have a security engineer review them.

Google also says 3.7 Flash remains available for workloads that prioritize efficiency. Check current Google documentation for model IDs, platform rollout, and regional access.