Build radar
Sources 33Updates always the freshest
0 Newsletter
Animated illustration for: Google’s strongest AI model goes to cyber defenders firstGemini 4 Carbon88.2%54.8%71.0%#10.7% → 0.0%$2 → $4$10 → $20
AI News · Nov 1, 2026 · 2 min

Google’s strongest AI model goes to cyber defenders first

Google has a new, most capable model, but you cannot use it yet. I explain why it went to cyber defenders first, what it can do and what it will cost you.

In short
  • On 28 Oct 2026 Google unveiled Gemini 4 Carbon, calling it its strongest model, especially in cybersecurity.
  • At first only a subset of cyber defenders get it; developers and businesses have to wait.
  • Launch price is $2/$10 per million tokens, later $4/$20.

In short: on 28 Oct 2026 Google announced Gemini 4 Carbon, the successor to Gemini 4 Argon, released two weeks earlier. The company calls it its strongest model, especially in cybersecurity and long tasks. The catch: for now only a subset of cyber defenders have access, and developers, businesses and consumers are to get it ‘as soon as possible’.

What Google reports

  • Artificial Analysis Intelligence Index v5.0: 59 points and first place.
  • Finding vulnerabilities (SEC-bench Pro): 88.2%, writing working exploits (ExploitGym): 54.8%, patching bugs (CWE-bench): 71.0%.
  • Prompt injection attack success on the Gray Swan IPI test: down from 0.7% to 0.0% compared with Argon.
  • More than twice the success rate for secure code and about half the unsupported claims compared with Argon, according to Google’s internal tests.

What it costs and who gets access

  • Launch price: $2 per million input tokens and $10 per million output tokens, with 95% off cached input.
  • After the launch period: $4 and $20. The Register notes this matches Claude Opus 5.5.
  • Access: selected cyber defenders first, then more trusted partners through the Fairwind programme. Google has given no date for everyone else.

How to read this

Almost every number comes from Google, and some come from internal tests nobody outside can repeat. The exception is the Artificial Analysis index, run by an independent company. The limited launch also shows that a model good at finding holes is just as useful to attackers, and Google prefers to hand it to defenders first. I compare the strongest models in the frontier models hub.

Sources

Frontier models

Related