Google Releases Gemini 4 Argon First to Trusted Cyber Defenders

Google’s next frontier model is reaching cybersecurity defenders before ordinary customers. On September 30, 2026, Google introduced Gemini 4 Argon through a restricted rollout aimed at trusted defenders, while it strengthens safeguards for wider access. The model targets software engineering, legal and financial work, and finding and fixing security flaws.

The release follows substantial use inside Google. The company says thousands of employees have used Argon for specialized coding, deeper research and writing. Its announcement describes agents working on engineering tasks that range from memory optimization across data centers to large code migrations.

One team of agents analyzed fleet-wide performance data and applied memory optimizations that Google says freed more than 300 TiB of memory after rollout. Other agents are migrating C/C++ software to Rust, including work spanning more than 800,000 lines of the Fuchsia operating system’s Zircon kernel.

Those rewrites are not being treated as ready-made production code. Google says critical systems undergo automated and manual audits, testing in emulated environments, and review before deployment. Argon’s role is to carry more of the engineering work, not eliminate those checks.

More room for a single reasoning run

To support longer tasks, Google raised the output limit to 1 million tokens from the previous 64,000-token limit it cites. Tokens are the units used to measure model input and output. This is an output allowance—not a claim about how much source material the model can accept. Google says the extra room lets Argon sustain deeper reasoning in one run.

Defenders get the first external access

The initial rollout runs through Google’s Fairwind Program. Google says Argon can autonomously find, validate and patch critical software vulnerabilities. For trusted defenders and its own internal teams, the company will release the model without cyber guardrails so they can use its full defensive capabilities.

Wiz is already using Argon through Scan for Good, its initiative to find and fix high-risk exposures in critical public infrastructure for free. Google says an early demonstration uncovered a critical flaw exposing personal information in healthcare software used by hospitals worldwide—a vulnerability previous frontier models had missed.

Google’s published scores include 77.9% on DeepSWE v1.1, which tests extended software-engineering tasks, and 51.3% on Zapier’s AutomationBench, which measures end-to-end business execution. It also reports a joint first-place score of 68% on CWE-bench v1, a vulnerability-remediation test. These are Google-reported results, not an independent assessment of Argon’s performance.

The work before wider access

Google says it is participating in the U.S. government’s voluntary pre-release model-access process and gathering early tester feedback. Its safety work includes several distinct controls:

• Misuse defenses: Refusing harmful requests and strengthening monitoring for cyber and chemical, biological, radiological and nuclear misuse.
• Task boundaries: Monitoring reasoning and actions, with execution stopped when necessary to prevent behavior beyond the user’s intentions.
• Testing environments: Isolating and sealing sandboxed systems before high-risk training or evaluations begin.

For developers planning ahead, Google lists introductory API prices of $2 per million input tokens and $10 per million output tokens. Cached input tokens are priced 95% below the standard input rate. The announcement gives no end date for the introductory pricing.

Broader availability will start with paid API customers and Google AI Ultra subscribers, Google says. It has not announced a date for that step. For now, the external rollout remains focused on trusted defenders and testers whose feedback will shape the systems surrounding the model.