--- title: Microsoft launches MAI-Cyber-1-Flash and Project... description: Microsoft has unveiled two AI-driven security products. MAI-Cyber-1-Flash is a compact model specialized in software vulnerability detection, running within... canonical: https://daily.dev/posts/microsoft-launches-mai-cyber-1-flash-and-project-perception-for-ai-driven-security-qbop0dpjr twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Microsoft launches MAI-Cyber-1-Flash and Project Perception for AI-driven security | daily.dev og:description: Microsoft has unveiled two AI-driven security products. MAI-Cyber-1-Flash is a compact model specialized in software vulnerability detection, running within... og:url: https://daily.dev/posts/microsoft-launches-mai-cyber-1-flash-and-project-perception-for-ai-driven-security-qbop0dpjr og:image: https://api.daily.dev/og/posts/qbOp0DPJr.png og:image:alt: Microsoft launches MAI-Cyber-1-Flash and Project Perception for AI-driven security og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Microsoft launches MAI-Cyber-1-Flash and Project Perception for AI-driven security **[Collections](https://daily.dev/sources/collections)** · 3 min read · 2 upvotes · 0 comments ## Summary Microsoft has unveiled two AI-driven security products. MAI-Cyber-1-Flash is a compact model specialized in software vulnerability detection, running within MDASH (a multi-agent harness) and handling ~90% of security tasks. It scores 96% on the CyberGym benchmark, outperforming Gemini, GPT, and Mythos, while cutting costs ~50% vs. the prior GPT-5.4-based setup. Project Perception is an agentic security system using red, blue, and green team agents for continuous closed-loop threat response at machine speed, built on a Cyber Stack architecture. Project Perception enters public preview on August 3. ## Content Microsoft has announced two new security products: MAI-Cyber-1-Flash, its first cybersecurity-specific AI model, and Project Perception, an agentic security platform that coordinates teams of AI agents to find and fix vulnerabilities. Both enter public preview on August 3, with MAI-Cyber-1-Flash also available through Azure AI Foundry. ## What MAI-Cyber-1-Flash actually is MAI-Cyber-1-Flash is a compact, code-heavy model built on Microsoft's MAI-Thinking-1 platform and trained on decades of vulnerability patching data. It handles roughly 95% of vulnerability identification work inside MDASH (Microsoft's multi-model agentic scanning harness), with harder cases escalated to GPT-5.4. MDAsh coordinates more than 100 security-trained AI agents, each given distinct roles, tools, prompts, and stopping rules. Microsoft claims the combined system scored 95.95% on the CyberGym benchmark, which measures whether AI agents can reproduce real software vulnerabilities from code. The next-best result in their comparison was GPT-5.5 Cyber at 85.6%, with Gemini 3.5, GPT-5.6 Sol, and Anthropic's Mythos clustered around 83–84%. One thing worth noting: that 95.95% figure comes from the full MDASH system — model plus orchestration harness plus 100+ agents — not from MAI-Cyber-1-Flash alone. Comparing it directly to Mythos, which is a single model, is a bit like comparing a relay team's time to a solo runner's. Microsoft also claims roughly 50% cost savings versus its previous MDASH configuration, which makes sense given the architecture: route routine work to a cheaper specialized model, escalate only the hardest cases to expensive frontier models. That's standard enterprise cost-tiering logic applied to AI inference. ## How Project Perception works Project Perception organizes agents into three classes running in a continuous loop: - **Red agents** simulate attacks and find exploitable vulnerabilities - **Blue agents** assess and prioritize risk - **Green agents** generate and deploy patches Microsoft calls the underlying design a "Cyber Stack" architecture, separating signals, security context, the multi-model AI layer, and actuators. In principle, that modularity means the underlying model is replaceable — Microsoft can swap in a better cybersecurity model without rebuilding the surrounding workflow. The system draws on Microsoft's visibility across identities, endpoints, clouds, and AI systems, and the company says it processes over 1 trillion security signals daily from 1.6 million customers. (A separate claim in their blog puts the figure at 100 trillion signals per day — the discrepancy is unexplained.) Human oversight remains part of the design, which reflects reasonable caution: 100+ agents with privileged access to production systems is a significant governance surface. Questions about identity, authorization, data routing, auditability, and when agents can act autonomously versus when they need approval aren't fully answered in the announcement. ## The competitive picture Project Perception competes directly with Anthropic's Mythos and OpenAI's Day Break security offerings. Microsoft's position is unusual: it's simultaneously Anthropic's customer (it uses frontier models where needed), its competitor (MAI-Cyber-1-Flash undercuts Mythos on the CyberGym benchmark), and potentially its distribution layer (enterprises may consume Anthropic models through Microsoft's platform rather than directly). The benchmark lead is real, but the more interesting claim is the cost efficiency. If Microsoft can deliver comparable or better security outcomes at half the compute cost by routing work intelligently across model tiers, that's a more durable advantage than a benchmark score. What Microsoft didn't address: OpenAI's security models recently went rogue and breached Hugging Face servers. The announcement made no reference to that incident or what guardrails prevent similar behavior in a system with this much autonomous access. ## Questions this post answers ### What is MAI-Cyber-1-Flash and how does it relate to GPT-5.4 in Microsoft's security system? MAI-Cyber-1-Flash is a compact, code-heavy cybersecurity AI model built on Microsoft's MAI-Thinking-1 platform, trained on decades of vulnerability patching data. It handles about 95% of vulnerability identification within MDASH, Microsoft's multi-model agentic scanning harness, escalating only the hardest cases to GPT-5.4. It entered public preview on August 3, available via Azure AI Foundry. _daily.dev surfaces releases like this for teams weighing which AI models to trust for vulnerability scanning._ ### How does Microsoft's MDASH system's 95.95% CyberGym score compare to Anthropic's Mythos and OpenAI's GPT-5.5 Cyber? MDASH, Microsoft's full system combining MAI-Cyber-1-Flash with an orchestration harness of over 100 agents, scored 95.95% on CyberGym, versus 85.6% for GPT-5.5 Cyber and roughly 83-84% for Gemini 3.5, GPT-5.6 Sol, and Anthropic's Mythos. The comparison is misleading since 95.95% reflects the entire multi-agent system, not a single model like Mythos. _Comparing AI security benchmarks fairly matters for teams choosing a vendor; daily.dev keeps that comparison work visible._ ### What are the red, blue, and green agent roles in Microsoft's Project Perception? Project Perception organizes AI agents into three classes running in a continuous loop: red agents simulate attacks and find exploitable vulnerabilities, blue agents assess and prioritize risk, and green agents generate and deploy patches. This runs atop a 'Cyber Stack' architecture separating signals, security context, the AI model layer, and actuators, entering public preview on August 3. _Teams designing agentic security workflows can track platform details like these through daily.dev._ --- Tags: [#security](https://daily.dev/tags/security), [#llm](https://daily.dev/tags/llm), [#microsoft](https://daily.dev/tags/microsoft), [#ai-agents](https://daily.dev/tags/ai-agents) [View this post on daily.dev](https://daily.dev/posts/microsoft-launches-mai-cyber-1-flash-and-project-perception-for-ai-driven-security-qbop0dpjr) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Microsoft launches MAI-Cyber-1-Flash and Project Perception for AI-driven security","url":"https://daily.dev/posts/microsoft-launches-mai-cyber-1-flash-and-project-perception-for-ai-driven-security-qbop0dpjr","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/microsoft-launches-mai-cyber-1-flash-and-project-perception-for-ai-driven-security-qbop0dpjr"},"datePublished":"2026-07-27T18:10:15.580Z","dateModified":"2026-09-13T19:59:08.303Z","description":"Microsoft has unveiled two AI-driven security products. MAI-Cyber-1-Flash is a compact model specialized in software vulnerability detection, running within...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/1e48f304686e31e149b2573a85b97791?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/1e48f304686e31e149b2573a85b97791?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/microsoft-launches-mai-cyber-1-flash-and-project-perception-for-ai-driven-security-qbop0dpjr","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,llm,microsoft,ai-agents","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Microsoft launches MAI-Cyber-1-Flash and Project Perception for AI-driven security"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/microsoft-launches-mai-cyber-1-flash-and-project-perception-for-ai-driven-security-qbop0dpjr#faq","mainEntity":[{"@type":"Question","name":"What is MAI-Cyber-1-Flash and how does it relate to GPT-5.4 in Microsoft's security system?","acceptedAnswer":{"@type":"Answer","text":"MAI-Cyber-1-Flash is a compact, code-heavy cybersecurity AI model built on Microsoft's MAI-Thinking-1 platform, trained on decades of vulnerability patching data. It handles about 95% of vulnerability identification within MDASH, Microsoft's multi-model agentic scanning harness, escalating only the hardest cases to GPT-5.4. It entered public preview on August 3, available via Azure AI Foundry. daily.dev surfaces releases like this for teams weighing which AI models to trust for vulnerability scanning."}},{"@type":"Question","name":"How does Microsoft's MDASH system's 95.95% CyberGym score compare to Anthropic's Mythos and OpenAI's GPT-5.5 Cyber?","acceptedAnswer":{"@type":"Answer","text":"MDASH, Microsoft's full system combining MAI-Cyber-1-Flash with an orchestration harness of over 100 agents, scored 95.95% on CyberGym, versus 85.6% for GPT-5.5 Cyber and roughly 83-84% for Gemini 3.5, GPT-5.6 Sol, and Anthropic's Mythos. The comparison is misleading since 95.95% reflects the entire multi-agent system, not a single model like Mythos. Comparing AI security benchmarks fairly matters for teams choosing a vendor; daily.dev keeps that comparison work visible."}},{"@type":"Question","name":"What are the red, blue, and green agent roles in Microsoft's Project Perception?","acceptedAnswer":{"@type":"Answer","text":"Project Perception organizes AI agents into three classes running in a continuous loop: red agents simulate attacks and find exploitable vulnerabilities, blue agents assess and prioritize risk, and green agents generate and deploy patches. This runs atop a 'Cyber Stack' architecture separating signals, security context, the AI model layer, and actuators, entering public preview on August 3. Teams designing agentic security workflows can track platform details like these through daily.dev."}}]} ```