Microsoft launches its first cybersecurity model, plus a new agentic cybersecurity system
Quick Answer
Microsoft has launched MAI-Cyber-1-Flash, its first cybersecurity model, and the Perception platform, aimed at automating security workflows.
Quick Take
The model outperforms competitors like Gemini and Mythos on the Cyber Gym benchmark and will be available for preview on November 3.
Key Points
- MAI-Cyber-1-Flash identifies vulnerabilities in complex codebases effectively.
- Perception automates security workflows using agentic teams for enhanced efficiency.
- The new model is claimed to be more cost-effective than existing competitors.
- Microsoft's tools respond to the rising threat of AI-driven cyberattacks.
- Preview availability of the new security tools starts on November 3.
DeepSignal Analysis
What happened
Microsoft has introduced its first cybersecurity model, MAI-Cyber-1-Flash, and a new platform called Perception. The model is designed to identify vulnerabilities in complex codebases and has reportedly outperformed competitors on a key benchmark. Both tools will be available for preview starting November 3.
Key evidence
- MAI-Cyber-1-Flash is built to find vulnerabilities in complex codebases and is integrated with Microsoft's MDASH for software vulnerability identification.
- The Perception platform automates security workflows by deploying teams of agents for tasks like bug identification and remediation, and it can integrate with MDASH.
- Microsoft claims that MAI-Cyber-1-Flash is significantly more powerful and cost-effective than competitor models, based on its performance on the Cyber Gym benchmark.
Why it matters
The launch of these tools comes as cybercriminals increasingly leverage AI for attacks, highlighting the need for advanced defensive measures. Microsoft's entry into the AI cybersecurity space adds competition to an already crowded market, which includes offerings from companies like Anthropic and OpenAI. The effectiveness of these new tools could influence how enterprises approach cybersecurity in an evolving threat landscape.
📖 Reader Mode
~3 min readMicrosoft on Monday launched its first cybersecurity-specialized model alongside a new AI cybersecurity platform at a small event in San Francisco, taking a big swipe at major players in the space — namely Anthropic, Google, and OpenAI.
The company describes MAI-Cyber-1-Flash as a model that’s built “to find challenging vulnerabilities in complex codebases.” The model is built to animate MDASH, Microsoft’s harness dedicated to software vulnerability identification and remediation.
The new security platform is dubbed Perception, and it’s designed to deploy teams of agents to assist with and automate various security workflows, including identifying and remediating bugs. The platform can also integrate with MDASH.
The company claims MAI-Cyber-1-Flash is significantly more powerful (and more cost-effective) than competitor models, based on its performance on an established AI cybersecurity benchmark.
“We’re very very excited to announce our results,” said Mustafa Suleyman, the co-founder of DeepMind and current CEO of Microsoft AI. “We have MAI-1 Cyber Flash binded [sic] with GPT 5.4 inside of the MDASH harness — which beats out Gemini, GPT 5.5 Cyber, GPT 5.6 Sol, and Mythos 5 on Cyber Gym, which is the primary benchmark that we all use. The golden benchmark.”
“We’re shipping this into production immediately,” he added.
Noting that hackers are increasingly using AI in their cyberattacks, Hayete Gallot, Microsoft’s vice president for security, described Perception as a way for enterprise defenders to “defend against AI with AI at the scale and speed that the attackers have.”
Perception uses agentic red teams, blue teams, and green teams. The red teams can provide detailed simulations of potential attacks — providing context about potential threat actors and the likely vulnerabilities that they might exploit. Blue teams are dedicated to detecting and triaging existing bugs, while green teams take “corrective actions” against those bugs.
Dave Weston, the lead engineer for Perception, described the platform as a massive efficiency upgrade for corporate defenders. “We’ve gone from this taking hours and hours of manual work from multiple specialized folks across the security organization — appsec hunters, remediation engineers, you name it — and in minutes, we have a fix for all of this. Not only do we discover the issues and prioritize them, but we have detection, posture fixing, and even a code fix.”
Though AI has offered new defensive capabilities to companies, its availability to cybercriminals has given rise to a dazzling array of potential threats.
Microsoft’s new security tools, which the company said will be available in preview on November 3, will enter an increasingly crowded field of AI cybersecurity solutions. Earlier this year, Anthropic launched Mythos, a security platform that was released to a small coterie of partner organizations through a program called Glasswing. OpenAI has also launched its own security solution in May through a program called Daybreak.
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Lucas is a senior writer at TechCrunch, where he covers artificial intelligence, consumer tech, and startups. He previously covered AI and cybersecurity at Gizmodo. You can contact Lucas by emailing lucas.ropek@techcrunch.com.
— Originally published at techcrunch.com
Want this in your inbox every morning?
Daily brief at your local 8am — bilingual EN/中文, free.
More from TechCrunch
See more →
AI chip startup Etched defies skeptics, hits $10.3B valuation from big-name investors
AI chip startup Etched has achieved a $10.3 billion valuation after a $300 million Series C funding round, led by Sequoia and supported by notable investors like Andreessen Horowitz. The company claims to have developed innovative low-voltage chips for AI inference, significantly enhancing performance and reducing costs, with $1 billion in orders already booked.
