Google made computer use a built-in tool inside Gemini 3.5 Flash on June 24, 2026. Previously required a standalone Gemini 2.5 computer use model; now available as native tool via Gemini API and Gemini Enterprise Agent Platform.
Developers activate computer use alongside code execution, search, and function calling. Safety: adversarial training, optional user confirmation for sensitive actions, automatic stop on indirect prompt injection detection.
Google has not published updated benchmark scores vs standalone model or named enterprise case studies. Opt-in safety guardrails signal capability not yet mature enough for unsupervised operation.