Google is making its most aggressive play yet in proactive cyber defense with the Fairwind Program, announced today. The initiative grants a vetted group of government agencies, critical infrastructure operators, and enterprise customers early access to Gemini 3.8 Flash Cyber paired with the CodeMender harness — a combination designed to find, verify, and fix vulnerabilities autonomously. More than 650 partners are already signed on globally.
The pitch is straightforward: defenders have been stuck choosing between massive frontier models that are expensive and unwieldy, or smaller open-weight models that require building your own tooling from scratch. Google says CodeMender with Gemini 3.8 Flash Cyber sidesteps that tradeoff, delivering specialized reasoning to write and validate code fixes ‘at a fraction of the operating cost of traditional frontier models.’ The company claims what once took weeks of manual patching can now happen in minutes, with deployment-ready fixes generated inside an organization’s own secure cloud environment.
Access is deliberately staged. Governments and national cyber authorities get priority, along with healthcare, telecom, energy, and financial network operators — the sectors where downtime translates directly to societal harm. Core technology platforms are also in the first wave, on the theory that securing foundational software ripples outward to millions of downstream users. Participating organizations must limit access to internal security, incident response, or penetration testing teams and enforce multi-factor authentication, a nod to how quickly powerful cyber tools can become double-edged.
The announcement comes with a broader funding push. Google.org’s cybersecurity commitments now exceed $100 million globally, with a newly released 2026 impact report detailing $36 million that has funded 35 cyber clinics serving over 1,250 hospitals, school districts, and municipal utilities. That grassroots angle is notable — most AI security headlines focus on enterprise contracts, but Google is quietly building goodwill at the public-service level too.
For any Google Cloud customer not in the program, CodeMender remains available with publicly hosted models on the Gemini Enterprise Agent Platform. But the message is clear: the most advanced cyber model is gated behind a trust framework, and Google intends to keep it that way while it learns how defenders actually use agentic patching at scale.
