Microsoft launches MAI-Cyber-1-Flash and Perception agentic security platform
The tools signal a major push to automate vulnerability discovery and remediation at enterprise scale, potentially reshaping the cybersecurity tool landscape and risk management for organizations.
At a glance
- MAI-Cyber-1-Flash is a cybersecurity-focused AI model designed to identify vulnerabilities in complex codebases and is integrated with the MDASH vulnerability-hunting harness.
- Perception is an agentic security platform that deploys red teams (attack simulations), blue teams (detection/triage), and green teams (remediation) to automate security workflows and fixes, with MDASH integration.
- Microsoft claims MAI-Cyber-1-Flash is more powerful and cost-effective than competing models and performed well on a Cyber Gym benchmark, beating several rival models.
- The tools are slated to enter preview on November 3, 2026, as Microsoft expands in a crowded AI cybersecurity market that includes security platforms from Anthropic and OpenAI, among others.
The story
Microsoft on Monday unveiled its first cybersecurity-specific AI model, MAI-Cyber-1-Flash, alongside a new security platform named Perception at a small San Francisco event. The model is designed to identify challenging vulnerabilities within complex codebases, and it is built to run within the MDASH harness, Microsoft’s platform purportedly tailored for software vulnerability identification and remediation.
Perception, the accompanying platform, is designed to deploy teams of AI-driven agents to assist with and automate a range of security workflows, including identifying and remediating bugs. The system can integrate with MDASH, according to the briefing from the company.
Microsoft executives positioned the launch as a move to help enterprise defenders match the scale and speed of AI-enabled attackers. Hayete Gallot, Microsoft’s vice president for security, described Perception as a way for defenders to respond to AI-enabled threats with AI-driven efficiency. Dave Weston, the lead engineer for Perception, characterized the platform as a major efficiency upgrade: teams can go from hours of manual work to ‘minutes’ of automated discovery, prioritization, detection, posture fixing, and even a code fix.
In promoting MAI-Cyber-1-Flash, Microsoft claimed it is significantly more powerful and cost-effective than competing models, citing performance on the Cyber Gym benchmark. The company also highlighted demonstrations of the model’s integration with the MDASH harness and its ability to simulate and patch vulnerabilities rapidly. The announcements come as the cybersecurity market grows more crowded with AI-powered tools from rivals such as Anthropic and OpenAI, which have rolled out competing security offerings earlier this year. The preview for the new tools is slated for November 3, according to Microsoft.