# MAI-Cyber-1-Flash

Microsoft, released 2026-07-27

**Verdict: conditional.** Microsoft's first in-house cybersecurity model, built on the MAI-Thinking-1 family and embedded inside the MDASH multi-agent harness, handles about 90% of security workloads at roughly half the cost of prior configurations and reserves GPT-5.4 for the hardest 10%. Microsoft reports 96% on CyberGym by the any-crash metric and 86.3% by the stricter final-submission metric, both from a tuned full-system configuration rather than an independent model-versus-model test. Available only through Azure AI Foundry with vetted enterprise access; no standalone pricing or public API. Last verified 2026-10-05.

## Pricing

- Input: N/A (MDASH SCU consumption)
- Output: N/A (MDASH SCU consumption)
- Context: Azure AI Foundry vetted access

## Strengths

- Vulnerability discovery on CyberGym — 96% on the any-crash metric and 86.3% on the stricter final-submission metric, both Microsoft-run on the MDASH full system
- Cost efficiency at scale — specialized small model handles about 90% of tasks, reserving GPT-5.4 for the hardest 10%, at roughly half the cost of prior MDASH configurations
- Deep integration with Microsoft's security estate — trained on decades of enterprise defense telemetry
- Not independently benchmarked — all CyberGym scores are vendor-reported from a full-system configuration (harness plus dual models), not a controlled model comparison, and rival scores may use a different CyberGym metric
- Restricted access — no public API or self-serve tier; gated behind Azure AI Foundry vetting
- Dual-use risk — built to find hard vulnerabilities, the same capability serves attackers with no built-in gating beyond access controls

## Benchmarks

- CyberGym, any-crash score (Microsoft-reported, MDASH full system): 96% (https://microsoft.ai/news/introducing-mai-cyber-1-flash-inside-mdash/)
- CyberGym, target (any-of) score (Microsoft-reported): 90.4% (https://microsoft.ai/news/introducing-mai-cyber-1-flash-inside-mdash/)
- CyberGym, final-submission score (Microsoft-reported): 86.3% (https://microsoft.ai/news/introducing-mai-cyber-1-flash-inside-mdash/)

## Sources

- [Microsoft Blog — Rethinking security for the age of AI](https://blogs.microsoft.com/blog/2026/07/27/rethinking-security-for-the-age-of-ai/)
- [Microsoft AI: MAI-Cyber-1-Flash announcement (vetted-access claim not re-confirmed, stored retained)](https://microsoft.ai/news/introducing-mai-cyber-1-flash-inside-mdash/)
- [CNET](https://www.cnet.com/tech/services-and-software/microsoft-says-its-new-cybersecurity-ai-beats-industry-leaders-at-half-the-cost/)
- [VentureBeat](https://venturebeat.com/security/microsoft-launches-ai-cybersecurity-model-agentic-defense-platform-to-cut-enterprise-security-costs)
- [TechCrunch — Microsoft launches its first cybersecurity model](https://techcrunch.com/2026/07/27/microsoft-launches-its-first-cyber-model-and-a-new-agentic-cybersecurity-system/)

Canonical: https://neomanex.com/models/mai-cyber-1-flash