Gemini 4 Carbon: Google's new frontier model for security and long-running work, cyber defenders first

Gemini 4 Carbon follows Gemini 4 Argon, which shipped two weeks ago, and is tuned for long agentic coding runs and security defense. Google says it ranks first on the Artificial Analysis Intelligence Index v5.0 with 59Vendor claim, and reports 88.2% on the SEC-bench Pro vulnerability-finding benchmarkVendor claim, 54.8% on ExploitGym for exploit validationVendor claim, and 71.0% on CWE-bench for patchingVendor claim. Internally, Google says it kept working for days, backing out of dead ends, to root-cause and fix bugs in large codebases.

For security teams, finding a flaw, checking whether it can be exploited and writing the patch can now run through one model. Pricing matches Argon at $2 per million input tokens and $10 per million output, with cached input 95% off, so teams already on Argon could switch at no extra cost once it opens up. Right now only approved security organizations get in, so most dev teams should track the release date rather than plan a rollout.