Version 4

Google released Gemini 3.6 Flash and 3.5 Flash-Lite on July 21, 2026, replacing 3.5 Flash just two months after its Google I/O debut, while a cybersecurity-specialized variant (Gemini 3.5 Flash Cyber) remains restricted to governments and trusted partners due to its ability to autonomously find and exploit production vulnerabilities [1][4]. Gemini 3.5 Pro has still not shipped; internal reporting from the LA Times now attributes the delay not only to coding performance shortfalls but also to clashing teams and frustrated engineers [9]. InfoWorld argues Google's CEO used talk of Gemini 4 and a commitment to monthly releases to redirect attention from the Pro delay [10]. Google has disclosed it has begun pre-training Gemini 4 with no timeline attached [1].

The delay of Gemini 3.5 Pro is acquiring an organizational dimension — team conflicts alongside technical shortfalls — that makes a resolution timeline harder to read than a simple benchmark gap. The CEO's framing of Gemini 4 pre-training and monthly releases as a forward-looking story sits in direct tension with a flagship model that has been publicly stuck for over a month. The restricted Flash Cyber model faces the same durability question: access controls hold only until a competitor ships an equivalent without them.

Google released three Gemini models in quick succession in July 2026. Gemini 3.6 Flash, released July 21, replaces 3.5 Flash just two months after its Google I/O debut, claiming 17% fewer output tokens and improvements on benchmarks where 3.5 Flash had underperformed, including DeepSWE coding (49% vs. 37%) and OSWorld computer use (83.0% vs. 78.4%) [1]. Gemini 3.5 Flash-Lite, released the same day, targets high-volume latency-sensitive workloads at 350 output tokens per second and is being integrated into Google Search [1][2]. 3.6 Flash is priced at $1.50 per million input tokens and $7.50 per million output tokens [2]. Ars Technica reported the unusual pace of deprecating a two-month-old flagship and argued that Google's efficiency-first training priorities may have caused 3.5 Flash's coding shortfall that 3.6 Flash was built to address [3].

Four days before the Flash releases, Google announced Gemini 3.5 Flash Cyber, trained specifically for offensive and defensive security work. In internal evaluations it found 55 unique confirmed vulnerabilities in Chrome's V8 JavaScript engine versus 47 by mainline 3.5 Flash and 36 by Claude Opus 4.6 [4]. In a two-hour test on Google's own production systems, it uncovered remote code execution vulnerabilities in public APIs and a memory-corruption flaw in a sensitive service, then generated a functional RCE exploit bypassing both ASLR and W^X mitigations [4]. Google restricted the model to governments and trusted partners via its CodeMender platform. The Verge and CyberNews framed Flash Cyber primarily as a cheaper alternative to large dedicated AI security models such as Mythos [5][6], while The Neuron argued that the gatekeeping logic holds only as long as no competitor ships an equivalent without restrictions [2].

The unresolved delay of Gemini 3.5 Pro has deepened with new internal reporting. Bloomberg first reported in mid-July that the model had been held back because coding performance fell short of internal targets [7], and Alphabet's share price fell on that report [8]. The LA Times subsequently published an account drawing on internal sources describing coding stumbles alongside clashing teams and frustrated engineers — adding an organizational dimension to what Google had characterized as a pure performance problem [9]. InfoWorld argued the CEO's decision to emphasize Gemini 4 pre-training and a monthly release cadence served to redirect public attention from the stalled Pro model [10]. Google has disclosed that Gemini 4 pre-training has begun, describing it as its most ambitious pre-training effort yet, without attaching a timeline or capability claims [1]. Some social media commentary connected that announcement to possible disappointment with 3.5 Pro development [11], a link Google has not confirmed.