Google made Gemini 3.8 Flash generally available with a one-million-token context window, 64,000-token output limit and adjustable reasoning effort. Introductory API pricing is $0.75 per million input tokens and $3.75 per million output tokens through 31 December 2026, then doubles. The same foundation model powers Gemini 3.8 Flash Cyber, a more permissive variant offered to qualified defensive organisations through Google's new Fairwind programme.
Why it matters: One launch joins a production agent model, a dated price transition and a gated cyber-capability path. Teams need separate decisions for ordinary software work, model economics and high-risk defensive access.
OpenAI's subsidized Daybreak program now has a concrete Daybreak Red route: approved customers can use GPT-5.6 Cyber through Amazon Bedrock in AWS GovCloud (US-East) for authorized vulnerability research, exploit validation and security testing. The original access commitment and eligibility controls remain in force.
Why it matters: The GovCloud route gives approved US government and regulated defenders a regional Bedrock deployment path while keeping the original controlled-access boundary. Approval and provisioning remain separate, so a Daybreak decision is not proof that the AWS…
Gemini 3.5 Flash Cyber is a specialist model for finding, validating and patching vulnerabilities inside Google’s CodeMender system. Access is limited to governments and trusted partners.
Why it matters: Frontier labs are starting to separate sensitive capabilities into controlled specialist systems instead of placing everything in general APIs.