Overview
MAI-Cyber-1-Flash is a sparse mixture-of-experts (MoE) model launched by Microsoft, focusing on cybersecurity. It has a total of 137B parameters but activates only 5B parameters per inference, balancing efficiency and performance. This model powers Microsoft's MDASH system and achieved a 95.95% accuracy rate on the CyberGym benchmark, significantly enhancing threat detection and code security analysis capabilities.
On 2026-10-28, Microsoft brought MAI Cyber 1.1 Flash to the MDASH platform, with reported adoption of the MAI Cyber model doubling to 50 percent.
Key Features
- Sparse MoE Architecture: Adopts a sparse MoE design with 137B total parameters and 5B active parameters, greatly reducing computational cost while maintaining high accuracy, suitable for real-time security scenarios.
- High-Accuracy Threat Detection: Achieves 95.95% accuracy on CyberGym, accurately identifying malware, exploits, and abnormal network behavior.
- Code Security Analysis: Optimized for code security, capable of detecting security vulnerabilities, backdoors, and unsafe coding patterns in code, supporting multiple programming languages.
- MDASH Platform Deployment: On 2026-10-28, Microsoft put MAI Cyber 1.1 Flash on the MDASH platform, with reported adoption of the MAI Cyber model doubling to 50 percent.
Use Cases
- Automated threat detection and response in enterprise Security Operations Centers (SOC)
- Integration of code security scanning in CI/CD pipelines for development teams
- Malware analysis and vulnerability discovery for cybersecurity research institutions
Pros
- Balance of high accuracy and low latency, suitable for production environments
- Sparse activation mechanism lowers hardware requirements, deployable on standard GPUs
- Microsoft ecosystem integration, seamless collaboration with Azure security services
- Available on the MDASH platform with reported MAI Cyber model adoption doubling to 50 percent as of 2026-10-28
Pricing
Provided through Microsoft Azure AI services, billed based on API call volume. Specific pricing requires contacting Microsoft sales or referring to the Azure pricing page.
Summary
MAI-Cyber-1-Flash is an efficient and precise cybersecurity AI model. With its sparse MoE architecture and 95.95% accuracy on CyberGym, it is an ideal choice for enterprise threat detection and code security analysis. Its low active parameter design reduces deployment costs, making it suitable for security scenarios requiring real-time response. As of 2026-10-28, the MAI Cyber 1.1 Flash release is available on MDASH, and reported adoption of the MAI Cyber model has doubled to 50 percent.
Version History
- MAI Cyber 1.1 Flash lands on MDASH as adoption doubles to 50 percent (2026-10-28): Microsoft put MAI Cyber 1.1 Flash on the MDASH platform, with reported adoption of the MAI Cyber model doubling to 50 percent.
- Microsoft releases MAI-Cyber-1-Flash: a cybersecurity model with 5B active parameters, powering MDASH in Cyb (2026-07-28): Microsoft released MAI-Cyber-1-Flash, a sparse MoE cybersecurity model with 137B total parameters (5B active parameters) and a 256k context window, which is a fine-tuned version of MAI-Code-1-Flash.