Google announced Gemini 4 Carbon on October 28, 2026, calling it its strongest model so far for cybersecurity and long, multi-step work. The interesting part is not only the benchmark numbers. It is the rollout: Carbon goes first to a small group of vetted cyber defenders, with developers, businesses, and consumers promised access later.

Coffee summary

  • FACT: Google says Carbon ranks #1 on v5.0 of the Artificial Analysis Intelligence Index with a score of 59.
  • FACT: Google reports 88.2% on SEC-bench Pro (finding vulnerabilities), 54.8% on ExploitGym (exploitation), and 71.0% on CWE-bench (patching).
  • FACT: Initial access is limited to a subset of cyber defenders, then trusted partners through Google's Fairwind Program.
  • FACT: Introductory API price is $2 per million input tokens and $10 per million output tokens, rising to $4 and $20 after the introductory period.
  • OPINION: Unless you work in security, plan for Carbon, but keep shipping on the models you can actually use today.

What Google actually announced

Carbon arrives just two weeks after Gemini 4 Argon, which Google describes as the base it built on. In Google's words, Carbon shows "significant gains across coding and agentic tasks," and its headline strength is security work: spotting vulnerabilities, understanding how they could be exploited, and writing patches.

Google also says that, in live coding environments with its own teams, Carbon showed reduced misalignment and fabrication rates, and that internal benchmarks show an uplift in generating secure code. CLAIM: these are Google's own internal measurements, so treat them as a direction rather than a guarantee until independent testers can run the model.

Why the slow rollout matters

Google says it is taking "a deliberate approach to rollout" and is taking part in the U.S. government's voluntary process for pre-release model testing. A model that is good at finding and exploiting bugs is useful for defenders and attackers alike, so starting with vetted defenders is a sensible way to learn where the guardrails need work before wider release.

For everyone else, this means there is no date yet. Google says it will bring Carbon to developers, businesses, and consumers "as soon as possible," but it has not published a timeline.

The pricing signal

The introductory price matches Argon at $2 input and $10 output per million tokens, with cached input tokens priced at 95% off. After the introductory window, the price doubles to $4 and $20. If you budget AI costs for a product, model the higher price from day one so the end of the promotion does not surprise you.

What this means for you

  • Security teams: watch for Fairwind Program access, and plan a pilot on real (sanitized) code with human review of every proposed patch.
  • Developers: keep building on Argon or your current model; Carbon's API is announced but not open to you yet.
  • Business owners: the bigger trend is that frontier labs now ship their most capable models in stages. Expect "announced" and "available to you" to be weeks or months apart.

What we still don't know

  • When Carbon reaches general developers and consumer apps.
  • How independent testers will score it outside Google's chosen benchmarks.
  • How long the introductory price lasts.

Bottom line

Gemini 4 Carbon is a real step for AI-assisted security, according to Google's numbers, but for most readers it is a preview, not a tool. Bookmark it, budget at the full price, and wait for independent results before you change your stack.

*Source: Google, "Introducing Gemini 4 Carbon," Oct 28, 2026.*