Microsoft has introduced MAI-Cyber-1-Flash, a new model designed specifically for cybersecurity work, and integrated it into MDASH. The company describes MDASH as a multi-model system used for identifying vulnerabilities and supporting remediation tasks.
In Microsoft’s setup, MDASH can route up to 90% of tasks to MAI-Cyber-1-Flash, while the most difficult 10% are handed off to GPT-5.4. That structure suggests Microsoft is using a tiered AI workflow, with a lighter specialized model doing most of the routine work and a more advanced model reserved for the toughest cases.
Microsoft says this approach helped MDASH achieve a 95.95% score while reducing cost by about half. Based on the company’s description, the main goal is to improve efficiency without giving up strong performance in cybersecurity analysis and response.
The launch highlights a wider shift toward domain-specific AI models instead of relying on one general-purpose system for every job. In this case, Microsoft is positioning MAI-Cyber-1-Flash and MDASH as a more cost-effective way to handle large volumes of security tasks while still keeping higher-end model capacity available when needed.