Google has folded computer use into Gemini 3.5 Flash as a built-in tool, replacing the standalone model developers previously needed to build agents that see and control screens. The capability is available today through the Gemini API and the renamed Gemini Enterprise Agent Platform.
The integration consolidates what was a two-model workflow into one. Developers previously had to call a separate Gemini 2.5 Computer Use model for browser-based agent tasks, feeding it screenshots and receiving structured commands in a loop.
Now, computer use sits alongside code execution, search, and function calling as a native tool inside Flash, the model Google launched at I/O 2026 as its fastest agentic AI model.
Product manager Mateo Quiros described the integration as giving Flash the ability to "see, reason about, and take action on screens," per 9to5Google. The model can handle browsers, mobile devices, and desktops, clicking buttons, filling forms, and executing multi-step workflows without API integrations for each application.
The enterprise pitch centers on automation that goes beyond chatbots. Google says the tool enables continuous software testing where agents verify functionality without human testers stepping through each screen, as well as knowledge work like extracting data from dashboards or dealing with internal tools.
Safety is where Google is drawing its sharpest lines. The company applied targeted adversarial training specifically for prompt injection, the attack where malicious instructions embedded in a webpage trick an AI agent into unintended actions. On top of that, Google offers two optional enterprise safeguards: one that requires explicit user confirmation before sensitive or irreversible actions like form submissions or purchases, and another that automatically halts tasks if it detects an indirect prompt injection attempt.
Both safeguards are opt-in, not defaults. Google recommends a "defense-in-depth" approach where developers layer multiple protections rather than relying on any single mechanism, a candid framing that contrasts with the company's marketing language around other AI capabilities. The competitive market has shifted since Anthropic pioneered computer use with a model that works across operating systems and file systems, not just browsers.
Google's own Chrome Enterprise added agentic browsing features earlier this year, and OpenAI has also entered the space. The question for enterprise buyers is less about which model can click a button and more about which can do it safely inside a regulated environment.
Google has not published updated benchmark scores for computer use as a built-in Flash tool versus the standalone model, nor disclosed how many enterprises are using the capability. The claims about adversarial training for prompt injection are described in the blog post but not backed by published research or red-team results.
Flash is one of the cheaper models in Google's lineup, which could make computer use more accessible for large-scale automation than running it through a heavier model. The Gemini Enterprise Agent Platform uses pay-as-you-go pricing.
Whether the cost advantage holds depends on how many actions a typical agent workflow requires and how often safety guardrails interrupt execution to request confirmation.
Computer use in AI is still early. The models can handle familiar interfaces but struggle with unexpected pop-ups, CAPTCHAs, dynamically loaded content, and layouts they have not seen before.
Google's decision to make it a built-in tool rather than a standalone model signals confidence that the capability is mature enough for general availability, but the opt-in safety guardrails signal equal awareness that it is not yet mature enough to run unsupervised.
