On this page

Microsoft AI’s blog (October 27, 2026) titled “MAI Cyber 1.1 Flash: Sharper findings and fewer tokens inside MDASH” says MAI Cyber 1.1 Flash takes vulnerability discovery a step forward inside MDASH, Microsoft’s multi-agent vulnerability identification and remediation harness (also described on the model page as a multi-model agentic scanning system). Related reading: Claude Security Now Keeps Scanning After the First Review and Checks Whether Fixes Land.

Cost and performance vs MAI Cyber 1 Flash (blog)

Relative to MAI Cyber 1 Flash, the blog says the new model delivers comparable performance while costing 18% less per scan on an internal MDASH vulnerability-scanning evaluation suite. In a later section it restates that, on the same MDASH evaluation suite, each scan costs 18% less to complete on an internal product evaluation set. Those figures are Microsoft’s internal product evaluation—not a third-party public leaderboard.

Adoption on the blog

Customers who try MAI Cyber 1 Flash in MDASH tend to stick with it: after a first scan with the MAI Cyber 1 Flash profile, nearly 9 in 10 subsequent scans use the MAI profile rather than the OpenAI-only model profile. To date, the blog says MAI Cyber accounts for almost 50% of all MDASH scans, with thousands of scans from hundreds of customers.

Mustafa Suleyman on X (figures from that post)

Microsoft AI CEO Mustafa Suleyman posted on X (2115129110930628859; created_at 2026-10-27T17:10:51Z (2026-10-28 01:10 Asia/Shanghai)) that the MAI Cyber model in the security harness has doubled user adoption to 50% in the last 30 days, and that it is 20% more token efficient without sacrificing quality. Those 20% / 30-day doubled-to-50% lines are from that X post; the Microsoft AI blog figure is 18% less per scan. Related reading: CodeRabbit Covers Up to $5,000 in Deep Scan Usage Through November 8.

Model page notes

The MAI-Cyber-1.1-Flash model page says MDASH with MAI-Cyber-1.1-Flash is 18% cheaper than MAI-Cyber-1-Flash; the model can handle up to about 90% of MDASH tasks, leaving the hardest for larger models; the harness orchestrates 100+ agents; and access is for verified defenders through MDASH.

Availability: MDASH verified customers only

The blog says MAI Cyber 1.1 Flash is available through MDASH to verified customers, with usage policies and ongoing monitoring. Existing MDASH customers select the MAI Cyber 1.1 Flash profile when starting a new scan; users new to MDASH should request access. This is not a public GA for arbitrary API or consumer users. Nearby Microsoft Copilot / harness coverage: VS Code 1.143 Makes the Copilot Harness the Default for New Sessions.

Product details can change; Microsoft AI’s blog and model page carry the latest wording. Cost, adoption, and task-coverage figures above are vendor-reported and have not been measured on this site. For reference only.