Google launches Fairwind Program: autonomous vulnerability discovery and patching with Gemini 3.8 Flash Cyber and CodeMender

Google announced the limited-access Fairwind Program giving governments, critical infrastructure operators, and partners (650+ organizations) access to Gemini 3.8 Flash Cyber paired with CodeMender to autonomously find, verify, and fix vulnerabilities with…

On 2026-09-02, Google/Google DeepMind announced the Fairwind Program, a limited-access offering combining the Gemini 3.8 Flash Cyber model with the CodeMender harness to autonomously find, verify, and fix vulnerabilities, generating verified, deployment-ready patches in minutes inside customers' cloud environments. Initial access is prioritized for governments, critical infrastructure operators in healthcare, telecom, energy, and finance, and core technology platforms, with more than 650 participating organizations globally; strict access standards restrict program use to internal security and incident response teams. The two reports differ slightly in framing eligible participants: Google describes the audience as governments, critical infrastructure operators, and trusted partners, while Google DeepMind lists Google Cloud customers, government agencies, and cybersecurity partners. Separately, Google Cloud customers can use CodeMender with publicly available models. Google also raised its total global cybersecurity funding commitment above $100 million, including $36 million granted across 35 US cyber clinics supporting hospitals, school districts, and municipal utilities.

• Fairwind Program bundles the Gemini 3.8 Flash Cyber model with the CodeMender harness to autonomously find, verify, and fix vulnerabilities, generating verified, deployment-ready patches in minutes inside customers' cloud environments.
• Limited-access program with more than 650 participating organizations globally.
• Initial access prioritizes governments, critical infrastructure operators in healthcare, telecom, energy, and finance, and core technology platforms.
• Strict access standards restrict program use to internal security and incident response teams (per Google DeepMind).
• Google Cloud customers can use CodeMender with publicly available models (per Google).
• Sources differ on participant framing: 'governments, critical infrastructure operators, and trusted partners' (Google) vs. 'Google Cloud customers, government agencies, and cybersecurity partners' (Google DeepMind).
• Google's total global cybersecurity funding commitment now exceeds $100 million.
• $36 million granted across 35 US cyber clinics supporting hospitals, school districts, and municipal utilities.