Google introduces Gemini 4 Carbon, reserving first access for cyber defenders

Google’s next flagship AI model is headed to cybersecurity defenders before ordinary customers. Announced on October 28, 2026, Gemini 4 Carbon is designed for engineering work that can stretch across days. Google calls it its strongest model, but plans to gather feedback and refine safeguards before opening access to developers, businesses and consumers.

Engineering work measured in days

Carbon is pitched as more than a tool for answering coding questions. Google says its internal teams have seen the model work for days on complex tasks, moving past failed approaches. It has traced subtle bugs and patched them across large codebases and low-level systems. Google says Carbon is designed for extended workflows in which an AI agent carries out a series of actions.

Google also reports gains outside that internal engineering work. It places Carbon first on version 5.0 of the Artificial Analysis Intelligence Index, with a score of 59. For web development, Google reports an 89-point improvement on WebDev Arena, taking Carbon to fourth place at 1769. These are rankings cited in Google’s announcement, rather than performance independently tested for this story.

Finding flaws, proving risk, writing fixes

Cybersecurity is the release’s clearest application. Google presents Carbon as covering three connected jobs: finding a software weakness, checking whether it can actually be exploited, and fixing its underlying cause. Validation helps defenders decide which flaws deserve priority. The company’s headline external benchmark results cover each step, but Google explicitly says those evaluations ran without guardrails.

88.2%Finding vulnerabilities

Google reports 88.2% on SEC-bench Pro, which tests the discovery of vulnerabilities in real-world software.

54.8%Validating exploitation

Google reports 54.8% on ExploitGym, a benchmark for exploiting vulnerabilities to validate risk.

71.0%Patching flaws

Google reports 71.0% on Collinear’s CWE-bench, which assesses fixes addressing vulnerabilities’ root causes.

Inside Google, the company says Carbon more than doubled Argon’s success rate at generating secure code on internal benchmarks. Its Chrome team also reported more than a tenfold improvement over another lab’s large frontier model at producing high-quality patches. Google did not name that competing model in the announcement, leaving the comparison without a specific rival readers can identify.

Safety changes before wider access

Alongside those capability claims, Google describes training intended to reduce shortcuts and inappropriate behavior under pressure. Carbon retains Argon’s layered safeguards, including real-time misuse defenses, monitoring of its reasoning, and resistance to prompt injection—attempts to steer a model through malicious instructions embedded in material it encounters.

Google reports zero successful cheating on Terminal-Bench 4.0, with cheating attempts at 0.4%, while overall accuracy improved. On Gray Swan’s Indirect Prompt Injection benchmark, it reports that no evaluated attack succeeded. That result applies to the attacks tested, not a guarantee against every future attempt to redirect the model.

In live coding work with internal teams, Google says high-severity misalignment alerts fell almost 80%. It also reports roughly half as many unsupported claims as Argon in internal testing. The intended behavior is concrete: disclose missing evidence or blocked actions instead of inventing a result, and surface conflicting information to the user before acting.

The immediate rollout remains limited. Google says selected cyber defenders will receive access this week, followed gradually by additional trusted partners through its Fairwind Program. It is also participating in the U.S. government’s voluntary pre-release testing process. Broader access depends on further feedback and guardrail work; Google has not set a firm date.

Introductory pricing

• Input: $2 per million tokens.
• Output: $10 per million tokens.
• Cached input: 95% off the standard input-token price.