Google is launching the Fairwind Program, a limited access initiative for governments, trusted partners, and Google Cloud customers. It unlocks our most advanced cyber defense and Gemini models to autonomously find and fix vulnerabilities. Teams once chose between expensive frontier models and smaller open-weight options that demanded complex, custom tooling. That trade-off ends now. Fairwind helps protect critical infrastructure, public services, and national security by shrinking the path from detection to a verified, deployment-ready patch.
What is the Fairwind Program, and who gets access?
The Fairwind Program offers limited access to Google’s most powerful cyber capabilities. It is designed for governments, trusted partners, and select Google Cloud customers. The goal is simple: proactively close cyber risks at enterprise scale.
Defenders previously faced a hard choice. Large frontier models were costly to deploy and hard to control. Smaller open-weight models often struggled with complex remediation and required building tooling from scratch.
Fairwind removes that compromise. It provides early access to powerful capabilities for a trusted circle of organizations. This gives them an adaptation window before bad actors exploit new capabilities.
The first step is access to advanced Gemini models for autonomous vulnerability discovery and remediation. The focus is clear: protect critical infrastructure, public services, and national security. You gain tools that operate quickly within a secure cloud environment.
So how does this work in practice, and what changes for your teams?
How does Fairwind autonomously find and fix vulnerabilities?
Fairwind combines the specialized Gemini 3.8 Flash Cyber model with the CodeMender harness. Together, they help find, verify, and fix vulnerabilities at agentic scale. Moving from awareness to actual security.
CodeMender with Gemini 3.8 Flash Cyber delivers specialized reasoning to write and validate fixes. It operates at a fraction of the cost of traditional frontier models. Teams generate verified, deployment-ready patches in minutes instead of weeks.
The key is autonomy and precision inside your secure cloud environment. You cut manual toil, avoid bottlenecks, and accelerate recovery. The agentic approach scales routine actions without losing control.
This flips the usual response dynamic. Discovery no longer slows you down, and fixes do not wait in line. The result is less downtime risk and fewer escalating incidents.
Spotting weaknesses creates awareness and fear; autonomously finding and fixing vulnerabilities delivers security.
You feel the difference where it matters. Less noise, more verified patches, and faster protection loops. Isn’t that what every security team wants?
Who gets early access, and what standards apply?
Early access goes to organizations critical to societal resilience. That includes governments and national cyber authorities, critical infrastructure operators, and core technology platforms. They need time to harden systems before adversaries level up.
The mission is to harden public-sector networks and citizen services against targeted intrusions. To shield healthcare, telecommunications, energy, and financial networks from operational disruption. To secure widespread software foundations and uplift millions of downstream users.
Access comes with strict operational standards. Participants limit tools to internal cybersecurity, incident response, or penetration testing teams. Protections like multi-factor authentication are required.
There are now more than 650 participating partners globally. Trusted defenders and industry leaders are already putting Gemini 3.8 Flash Cyber into practice. This is not a paper pilot — it is live fixes and real workflows.
Want to be next in line? It depends on your critical role and readiness to follow the standards.
How will the program evolve, and what are access alternatives?
Fairwind will evolve alongside partners’ and users’ needs. Product offerings will adapt, and access will expand. The balance between open access and robust security remains central.
While prioritizing Gemini 3.8 Flash Cyber for Fairwind participants, other customers have options. Any Google Cloud customer can proactively secure code. Use CodeMender with publicly available models on the Gemini Enterprise Agent Platform, plus solutions from AI Threat Defense.
This enables distinct tracks for different organizations. Some operate at the forefront with the most advanced capabilities. Others use public models and proven solutions to strengthen daily defense.
The shared goal is to shrink time from detection to patch. Tools may differ, but the outcome is the same — raising baseline code security at scale.
Ready to embed autonomous agents into your pipelines? That is where the tactical advantage starts to show.
What is the ecosystem impact, and what edge do defenders gain?
Years of zero-trust architecture, advanced AI defenses, and built-in security pay off. Google protects billions of accounts daily and keeps more people and organizations safe online than anyone else. Fairwind builds on this foundation.
The program is part of a broader commitment to global cyber resilience. It spans the entire digital ecosystem, including efforts to fortify grassroots cyber defense. Ecosystem-scale impact comes from practical tools and community support.
Through Google.org, total cybersecurity funding now exceeds $100 million globally. The 2026 Google.org US Cybersecurity Impact Report is available. It details $36 million for 35 cyber clinics and free, hands-on support for over 1,250 hospitals, public school districts, and municipal utilities in the U.S.
The defender’s edge comes from shrinking time between detection and patching. Through Fairwind, government and enterprise partners gain autonomous tools to repair systems faster and at scale. That keeps them a step ahead of agentic-speed threats.
Will this become the new standard for cyber defense? When fixes are generated and validated in minutes, the answer is clear.
Based on Google.
