Microsoft ships its first in-house cyber model as Project Perception heads to preview

MAI-Cyber-1-Flash routes 90% of MDASH's vulnerability work; public preview opens Aug. 3.

Microsoft introduced MAI-Cyber-1-Flash at a San Francisco event on July 27, its first in-house cybersecurity model, and paired the launch with Project Perception, a multi-agent defense platform entering public preview on August 3 inside Microsoft Defender. The framing is efficiency: Flash handles up to 90% of tasks inside MDASH, Microsoft’s software vulnerability harness, while OpenAI’s GPT-5.4 is reserved for the hardest 10%. “We have world-leading performance at 50% of the cost,” Microsoft AI CEO Mustafa Suleyman said. The blog post claims a 96% score on the CyberGym benchmark, “+12 points above Mythos,” and “almost 50% of cost savings vs. current production.”

The routing story is the real story. Reserving a frontier model for the difficult tail while a cheaper in-house model absorbs the bulk is the same architectural logic that reshaped cloud economics a decade ago, and it doubles as a quiet declaration of independence from OpenAI at the workload layer.

Project Perception organizes three classes of agents: red agents that “probe like an attacker,” blue agents that investigate and triage, and green agents that remediate and harden. Pricing is consumption-based, metered in Security Compute Units, per CNBC, with code changes applied only after explicit permission. Platform lead engineer Dave Weston said the work “was taking hours and hours of manual work from multiple specialized folks,” compressed now into “detection, posture fixing, and even a code fix.”

The benchmark claims deserve scrutiny. The Hacker News notes CyberGym Level 1 tests reproduction of known vulnerabilities, not blind discovery. Microsoft’s 95.95% figure wasn’t on the public leaderboard as of July 28, where Wiz’s Atlas leads at 90.9% and Microsoft’s own May 12 MDASH submission scored 88.4%. Microsoft’s model card warns generated code “may be inaccurate or incomplete.”

Context matters here. Shares are down 19% year-to-date, and this is the first major security launch under Hayete Gallot, who rejoined as EVP of Security in February after Charlie Bell stepped back to individual contributor. A cost-savings pitch, on benchmark ground the company is still climbing, reads accordingly.

Microsoft ships its first in-house cyber model as Project Perception heads to preview

Sources