Gemini 4 Carbon: The AI That Finds & Fixes Hacks Better Than Anything Else (Limited Access Only)
Gemini 4 Carbon is Google DeepMind’s newest frontier model. Announced on 28 October 2026, it ranks number one on the Artificial Analysis Intelligence Index v5.0 with a score of 59. It leads in finding, testing, and fixing security flaws while handling long, complex coding jobs that can take days.
I have followed every major AI release this year. This one stands out for one clear reason: it is built to help defend systems, not just write code.
What Makes Gemini 4 Carbon Different
Carbon sits above Gemini 4 Argon. Argon came out only two weeks earlier. Carbon improves on it in two main areas.
First, cybersecurity. Second, long-horizon agentic work. That means the model can stay focused on hard engineering tasks for days, push through dead ends, and finish the job.
Google designed it for real security teams and developers who deal with messy, multi-step problems.
Key Benchmark Results
Carbon leads several important tests. Here are the numbers Google published and independent rankings confirmed.
| Benchmark | What It Measures | Carbon Score |
|---|---|---|
| Artificial Analysis Intelligence Index v5.0 | Overall intelligence ranking | 59 (#1) |
| SEC-bench Pro | Finding real software vulnerabilities | 88.2% |
| ExploitGym | Checking if vulnerabilities can be used | 54.8% |
| CWE-bench | Patching vulnerabilities at the root | 71.0% |
For comparison:
- Claude Opus 5.5 scored 58 on the same Intelligence Index.
- GPT-6 Astra scored 57.
- Gemini 4 Argon scored 50.
On WebDev Arena, Carbon gained 89 Elo points and reached 1768, placing fourth overall.
Internal tests also show strong gains. Carbon generates secure code more than twice as often as Argon. The Chrome team reported it produced high-quality patches more than 10 times better than another major lab’s frontier model on the same tasks.
How It Handles Security Threats
Carbon covers the full cybersecurity defense cycle:
- Finding vulnerabilities in real code
- Checking whether those flaws can actually be exploited
- Writing working patches that fix the root cause
It also resists prompt injection attacks extremely well. On Gray Swan’s indirect prompt injection tests, the attack success rate dropped to 0.0%. Argon was already low at 0.7%. Carbon blocked every attempt evaluated.
These results matter for anyone who builds or protects software systems.
Pricing and Who Can Use It
The introductory price matches Argon:
| Token Type | Introductory Price | Later Price |
|---|---|---|
| Input (per 1M) | $2.00 | $4.00 |
| Output (per 1M) | $10.00 | $20.00 |
| Cached input | 95% off input rate | 95% off |
Access is limited. Right now only a selected group of cybersecurity defenders inside Google’s Fairwind Program can use Carbon. Google is following the U.S. government’s voluntary pre-release testing process. Wider access for developers, businesses, and everyday users is planned after more testing and feedback. No exact public date has been given yet.
If you are not in that first group, you cannot use the model today.
Strengths and Current Limits
Strengths I see clearly:
- Top score on the latest overall intelligence index
- Clear lead in vulnerability finding, exploitation testing, and patching
- Stronger long-running focus on complex coding tasks
- Better resistance to prompt injection
- Same low introductory price as Argon
Limits that still matter:
- Most people cannot access it yet
- It is an improvement on Argon, not a completely new architecture
- Real-world results outside controlled benchmarks are still limited to the first Fairwind users
My View After Reviewing the Data
I trust numbers more than marketing claims. The benchmark leads look solid. The focus on secure code and multi-day tasks matches what many teams need right now. The careful, staged rollout with security experts first is the right approach.
Until broader access arrives, Carbon remains a strong announcement with proven results on paper. The next important step is seeing how the early users report real performance on production systems.
Frequently Asked Questions
Is Gemini 4 Carbon better than Argon?
Yes on the tests that matter most for security and long tasks. It scores higher overall and shows clear gains in secure code generation and reliability.
Can I use Gemini 4 Carbon today?
Only if you are part of the selected cyber defenders in Google’s Fairwind Program. Public access is not open yet.
How long will the low price last?
Google has not published the exact end date. After the introductory period the rates rise to $4 input and $20 output per million tokens.
Does it replace Gemini 4 Argon?
Google has not said so. Argon remains the model available to most users. Carbon is positioned as the stronger option for the hardest security and engineering work.
Looking Ahead
I expect wider access in the coming weeks or months if the pattern from Argon continues. When that happens, the real test begins. Clean benchmark wins are useful. Consistent performance on messy, real-world codebases and live security reviews will decide how valuable Carbon becomes.
For now the data shows Google has closed important gaps in reliability and cybersecurity capability. That is worth watching closely.
Further Reading
- Official Google DeepMind announcement for Gemini 4 Carbon
- Artificial Analysis Intelligence Index v5.0
- SEC-bench Pro, ExploitGym, and CWE-bench public results
- Google’s Safety and Security report for the Gemini 4 series







