Google's cloud division is growing faster than its rivals Amazon and Microsoft, with revenue jumping 82% year-over-year in the second quarter of 2026, yet the company's decision to dramatically increase capital spending has rattled Wall Street. CEO Sundar Pichai has raised Alphabet's capital expenditure outlook to $200 billion for 2026, up from an original midpoint of $185 billion, and signaled that spending will climb even higher next year. The market's negative reaction overshadowed an otherwise strong earnings report, leaving investors questioning whether the massive infrastructure investment will actually pay off.

The tension reflects a fundamental disagreement about Alphabet's future. The company controls 90% of the internet search market through Google and owns dominant platforms including YouTube and Android. Today, its major growth opportunity lies in artificial intelligence, where it is competing fiercely with Amazon Web Services (AWS), which holds 28% of global cloud market share, and Microsoft, which controls 21%. Google's 14% share may seem smaller, but its growth rate tells a different story.

Why Is Google Spending So Much Money Right Now?

Pichai has explained that management believes its spending delivers an attractive return on investment and would not pursue this strategy otherwise. The challenge is timing: even as Alphabet reported negative free cash flow for the first time since becoming a public company, the CEO has warned that capex spending is likely to increase again next year. This creates a credibility gap for investors accustomed to tech companies that generate enormous profits without massive infrastructure outlays.

Interestingly, Warren Buffett has become a huge Alphabet fan, making it Berkshire Hathaway's third-largest position, tied with Coca-Cola. Buffett has long preferred companies that don't need to spend heavily to make money, yet he and Berkshire CEO Greg Abel appear convinced that the returns justify Alphabet's spending spree. Pichai described the AI business as presenting "extraordinary opportunities with extraordinary returns for executing well on those opportunities".

Pichai

What New AI Tools Is Google Releasing to Justify the Spending?

On September 3, 2026, Google announced two variants of its Gemini 3.8 Flash model designed to demonstrate the practical value of its infrastructure investment. The standard Flash model is tuned for agentic tasks, software development, and multi-step reasoning, while Flash Cyber is optimized specifically for vulnerability discovery and automated patching.

Pichai highlighted the coding performance gains in a post on X, stating that Gemini 3.8 Flash delivers "significant leaps" over its predecessor in software engineering and multi-step reasoning. The model outperformed many large frontier models on the DeepSWE coding benchmark at a much lower cost. On the Humanity's Last Exam benchmark, which tests multi-step reasoning across math, science, and humanities, the model scored 54.9%, reflecting its ability to handle complex reasoning tasks.

The model supports a 1 million-token input window, meaning it can process roughly 100,000 words at once, and can ingest text, images, audio, video, and PDF files. Google senior product director Tulsee Doshi and Gemini security lead Raluca Ada Popa noted that 3.8 Flash "works harder" and shows "greater diligence" on complex tasks by executing extra reasoning steps, though this may sometimes use more tokens to maximize performance.

How to Access Google's New AI Security Tools

• Gemini 3.8 Flash Availability: The standard Flash model is available now in Gemini Enterprise, with developers able to access it via the Gemini API through Google AI Studio, Google Antigravity, Android Studio, or through Stitch UI generation. Introductory pricing matches Gemini 3.7 Flash at $0.75 per million input tokens and $3.75 per million output tokens.
• Flash Cyber Access: Flash Cyber is initially being rolled out to "trusted defenders" through Google's Fairwind Program, which prioritizes government authorities, critical-infrastructure operators, and other vetted partners seeking advanced cyber defense capabilities. More than 650 partners globally are participating in the initial rollout.
• Fairwind Program Eligibility: The program focuses on government agencies, national cyber authorities, critical infrastructure operators, and core technology platforms working across healthcare, telecommunications, energy, and financial networks. Access is subject to strict operational requirements, including limiting use to internal cybersecurity, incident response, and penetration-testing teams, along with safeguards such as multi-factor authentication.

Google is combining Gemini 3.8 Flash Cyber with its CodeMender harness to create a system designed to autonomously find vulnerabilities, reason through potential fixes, validate the resulting code, and generate deployment-ready patches. The company says this combination can reduce the time required to address vulnerabilities from weeks of manual work to minutes, while operating within an organization's secure cloud environment.

"Beyond benchmarks, we're seeing impressive real-world use cases. For example, in evaluations on real Chrome security bugs, 3.8 Flash Cyber produced 2.6x more correct patches for vulnerabilities than larger models," said Sundar Pichai.

Sundar Pichai, CEO at Google

Flash Cyber achieved 86.2% on the CyberGym cybersecurity benchmark and 47.2% on CWE-Bench, which evaluates AI patching abilities. In an internal Google benchmark, the model achieved more than a 70% success rate discovering vulnerabilities across 20 programming languages. Google is already using 3.8 Flash Cyber to secure its own code, with the model producing 2.6 times more correct patches for Chrome vulnerabilities compared with much larger commercial models.

Wiz, which Google acquired earlier in 2026 in a $32 billion deal, reported that 3.8 Flash Cyber achieved 7.5% to 9.7% higher recall of real-world vulnerabilities on an internal penetration testing benchmark at 2.3 to 5.2 times lower cost than leading frontier models. Google's Cloud Vulnerability Research found a critical foundational vulnerability in under two hours using 3.8 Flash Cyber; the company says the same discovery would typically take months.

Doug Turner, engineering director for Chrome, described a recent "vulnerability apocalypse" as generative AI led to a sharp increase in reported software vulnerabilities. He recounted that 3.8 Flash Cyber discovered a subtle bug that had existed in Chromium and Chrome for 13 years, an issue dozens or hundreds of engineers had reviewed without flagging. Turner said Gemini 3.8 Flash Cyber will help produce better suggested fixes and make developers' lives easier.

Google frames the Gemini 3.8 Flash releases as tools to strengthen defenders' capabilities rather than amplify offensive use. By making Flash Cyber initially available only to vetted partners and embedding safeguards, Google aims to provide advanced automated discovery and patching while limiting the risk of malicious misuse. The company prioritized vulnerability fixing over offensive capabilities like exploitation and built protections against misuse in cyber offense and in sensitive domains such as chemical, biological, radiological, and nuclear applications.

The question now is whether these new tools and the broader AI capabilities they represent will justify Alphabet's massive capital spending to investors. Alphabet has proven itself multiple times by harnessing opportunities, leveraging its platform for greater growth, and delivering healthy profitability. If the company executes well on AI, smart investors may recognize that the current market dip represents a buying opportunity.

" }