MAI-Cyber-1-Flash評測：微軟自研資安AI砍半成本抓漏洞 | MAI-Cyber-1-Flash Review: Microsoft's In-House Cyber AI

By Kit 小克 | AI Tool Observer | 2026-08-12

🇹🇼 MAI-Cyber-1-Flash評測：微軟自研資安AI砍半成本抓漏洞

MAI-Cyber-1-Flash 是微軟 2026 年 7 月底發表的自研資安 AI 模型，跑在新的代理人平台 Project Perception 上，8 月 3 日起在 Microsoft Defender（MDASH）內公開預覽。重點在於：它自己包辦九成的漏洞掃描與修補工作，只有最難的一成任務才丟給 GPT-5.4，整體算下來比原本的 MDASH 組合省了大約一半算力成本。

什麼是 MAI-Cyber-1-Flash？跟 Project Perception 什麼關係？

簡單說，MAI-Cyber-1-Flash 是一顆從 MAI-Code-1-Flash 微調出來的稀疏 MoE 模型，總參數 137B、實際啟動只有 5B，支援 256k 上下文，訓練資料是微軟內部累積的漏洞與修補紀錄。它是 Project Perception 這套「防禦系統」裡的核心引擎，平台上還有紅隊代理人（模擬攻擊者探測）、藍隊代理人（篩選真正的威脅）、綠隊代理人（寫修補並部署），高風險動作仍需要人類簽核才能執行，不是全自動放養。

CyberGym 跑分 95.95% 是什麼概念？

CyberGym 是拿 188 個 OSS-Fuzz 開源專案、共 1,507 個真實漏洞重現任務組成的測試集，考驗模型能不能真的生出可運作的漏洞驗證（PoC）。MAI-Cyber-1-Flash 加持後的 MDASH 拿下 95.95%，比 Anthropic 的 Mythos（約 83%）高出十幾分。這代表它不只是「看得懂」漏洞報告，而是真的能重現並驗證問題所在，這對資安團隊的實戰價值差很多。

省一半成本是真的嗎？經濟帳怎麼算

微軟的算法是：把便宜的自研模型當主力處理九成例行任務，只有真正棘手的一成才動用昂貴的前沿模型（GPT-5.4）。跟過去 MDASH 全靠 GPT-5.4 + 5.4-mini + 5.3-codex 的組合相比，整體運算成本降了約 50%。這種「小模型扛大部分工作量、大模型救火」的分工邏輯，其實跟 DeepSeek V4 Flash 那套「省成本追平大廠模型」的思路很像，只是這次換成企業資安場景。

小克怎麼看

老實說，資安 AI 代理人這幾年講很多，能不能落地要看兩件事：跑分漂不漂亮、還有企業敢不敢真的放權讓 AI 動手修東西。MAI-Cyber-1-Flash 的跑分數字確實硬，但公開預覽才剛開始，高風險動作還是要人簽核，代表微軟自己也還沒完全放心。如果你的團隊本來就在用 Microsoft Defender，這波升級值得關注；如果是評估要不要導入企業級資安 AI，建議先看它在你自己環境裡處理真實漏洞的表現，而不是只看官方跑分。

好不好用，試了才知道。

🇺🇸 MAI-Cyber-1-Flash Review: Microsoft's In-House Cyber AI

MAI-Cyber-1-Flash is Microsoft's first in-house cybersecurity AI model, unveiled in late July 2026 and running inside the new Project Perception agentic platform, which entered public preview on August 3 inside Microsoft Defender (MDASH). The headline: this smaller model handles roughly 90% of routine vulnerability scanning and patching work on its own, escalating only the hardest 10% of tasks to GPT-5.4 — cutting overall compute costs by about half.

What Is MAI-Cyber-1-Flash and How Does It Fit Project Perception?

MAI-Cyber-1-Flash is a sparse mixture-of-experts model fine-tuned from MAI-Code-1-Flash — 137B total parameters, only 5B active, with a 256k context window, trained on Microsoft's own internal exploit and remediation records. It powers Project Perception, a "system of defense" that fields red agents (probing like attackers), blue agents (triaging real threats), and green agents (writing and deploying fixes) — with high-impact actions still gated behind human sign-off, not fully autonomous.

What Does a 95.95% CyberGym Score Actually Mean?

CyberGym is a benchmark built from 1,507 real-world vulnerability reproduction tasks across 188 OSS-Fuzz open-source projects, testing whether a model can actually produce a working proof-of-concept exploit — not just describe the bug. MDASH powered by MAI-Cyber-1-Flash scored 95.95%, roughly 12 points ahead of Anthropic's Mythos (around 83%). That gap matters: it means the model can reproduce and verify the flaw, not just summarize a report.

Is the 50% Cost Cut Real?

Microsoft's math: let the cheap in-house model carry 90% of routine tasks, and reserve the expensive frontier model (GPT-5.4) for the toughest 10%. Compared to the previous MDASH stack of GPT-5.4 + 5.4-mini + 5.3-codex, that combo cuts total compute spend by roughly 50%. It's the same "small model does the heavy lifting, big model bails it out" logic we've seen from DeepSeek V4 Flash on coding costs — just applied here to enterprise security operations.

Kit's Take

Security AI agents have been hyped for years, and whether they actually work comes down to two things: benchmark credibility, and whether enterprises trust AI enough to let it touch production fixes. MAI-Cyber-1-Flash's CyberGym numbers are genuinely strong, but this is still public preview, and high-impact actions require human approval — a sign Microsoft itself isn't fully confident yet either. If you're already on Microsoft Defender, this upgrade is worth watching. If you're evaluating enterprise security AI more broadly, test it against real vulnerabilities in your own environment before trusting the marketing benchmark.

好不好用，試了才知道 — the only way to know if it works is to try it yourself.

Sources / 資料來源

常見問題 FAQ

MAI-Cyber-1-Flash 是什麼？

微軟自研的資安 AI 模型，從 MAI-Code-1-Flash 微調而來，137B 總參數、5B 啟動參數，跑在 Project Perception 平台上，8 月起在 Microsoft Defender 公開預覽。

Project Perception 會自動修補漏洞嗎？

平台有紅、藍、綠三種代理人分別負責探測、篩選威脅、寫修補，但高風險動作仍需要人類簽核，不是完全自動放行。

CyberGym 跑分 95.95% 代表什麼？

代表模型能在 1,507 個真實漏洞任務中生出可運作的漏洞驗證（PoC），不只是描述問題，比 Anthropic Mythos 的約 83% 高出十幾分。

省下的 50% 成本是怎麼算出來的？

把九成例行任務交給便宜的自研小模型處理，只有最難的一成才動用昂貴的 GPT-5.4，跟過去全靠大模型的組合相比省了約一半運算成本。

延伸閱讀 / Related Articles

AI 工具觀察站 — 每日精選 AI Agent 與工具趨勢
AI Tool Observer — Daily curated AI Agent & tool trends

Claude Code 實測：AI 幫你寫程式到底行不行？ | Claude Code Review: Can AI Really Code for You?

3月 26, 2026

閱讀完整內容

搜尋此網誌

AI小貼士