Google announces Gemini 4 Carbon, a frontier model it says leads SEC-bench Pro, ExploitGym and CWE-bench for finding, exploiting and patching vulnerabilities; first access goes to a subset of cyber defenders through its Fairwind Program
Google announced Gemini 4 Carbon on 28 October 2026, calling it its strongest model, with state-of-the-art cybersecurity and long-horizon capabilities (Google blog, Koray Kavukcuoglu, SVP Google DeepMind and Chief AI Architect).
Google says Carbon scores 88.2% on SEC-bench Pro for finding vulnerabilities, 54.8% on the ExploitGym exploitation benchmark and 71.0% on Collinear's CWE-bench for patching, evaluated without guardrails, and ranks first at 59 on v5.0 of the Artificial Analysis Intelligence Index.
On internal benchmarks, Google says Carbon achieves more than 2x uplift in success rate for generating secure code over Gemini 4 Argon, and that the Chrome team reported Carbon performed more than 10X better than another lab's large frontier model when generating high quality patches.
On safety, Google says Carbon builds on Argon's multi-layered safety and security stack, achieved a 0.0% attack success rate on Gray Swan's Indirect Prompt Injection benchmark (Argon: 0.7%), cut successful cheating on Terminal-Bench 4.0 to 0.0%, and saw high-severity misalignment alerts drop by almost 80% in live coding environments with internal teams.
Google says it is taking a deliberate approach to rollout and is taking part in the U.S. government's voluntary process for checking models before release: starting this week, Carbon goes to a subset of cyber defenders, with access phased to additional trusted partners through its Fairwind Program before availability to developers, businesses and consumers. Google lists an introductory price of $2 per million input tokens and $10 per million output tokens, then $4 and $20. (source: Google)
- Product
- Google Gemini 4 Carbon (frontier AI model; Fairwind Program early access — not a CVE)
- Versions
- n/a — model launch; initial access for a subset of cyber defenders (Google, 28 Oct)
- Exploited in Australia?
- unknown
- Patch to
- Nothing to patch. Google says Carbon is available first to a subset of cyber defenders and then to additional trusted partners through the Fairwind Program, before developers, businesses and consumers.
