Google is gating its new vulnerability AI behind government and partner access only; restrictions on frontier tools have always slowed defenders more than attackers.Cyber Resilience desk
Sources (2)
What this means for you — CISO:Gemini 3.5 Flash Cyber is in a limited-access pilot for governments and trusted partners via CodeMender; track whether your org or vendors qualify and what access criteria Google publishes as the program expands.
What this means for you — Lean IT orgs:This tool is not generally available—you cannot sign up for it today. Keep applying vendor patches on your normal schedule; nothing here changes day-to-day fix work for a small team.
What this means for you — MSP:Access is limited to governments and trusted partners for now. Watch Google’s partner criteria and any CodeMender availability that could eventually support client vuln triage across your book of business.
What this means for you — Researcher:Google DeepMind’s Gemini 3.5 Flash Cyber is purpose-built to find, validate, and propose patches; availability is gated through the CodeMender pilot, so independent evaluation depends on partner or later public access.