Google’s Gemini 4 Carbon Is Built to Find, Exploit and Patch Bugs, and Defenders Get It First

Google's Gemini 4 Carbon Is Built to Find, Exploit and Patch Bugs, and Defenders Get It First

Two weeks after shipping Gemini 4 Argon, Google is already back with a bigger model. And this time, security teams are first in line.

On Wednesday, Google announced Gemini 4 Carbon, which it calls its strongest model yet, with state-of-the-art cybersecurity and long-horizon capabilities. Google says Carbon ranks No. 1 on version 5.0 of the Artificial Analysis Intelligence Index with a score of 59.

A model aimed at the whole security lifecycle

Google is pitching Carbon as a tool for every step of vulnerability work: finding flaws, confirming they can be exploited, and fixing them. It reports 88.2% on SEC-bench Pro for finding vulnerabilities, 54.8% on ExploitGym for exploitation and 71.0% on Collinear’s CWE-bench for patching, all evaluated without guardrails.

On internal benchmarks, Google says Carbon is more than twice as successful as Argon at generating secure code. The Chrome team reported Carbon performed more than 10 times better than another lab’s large frontier model at producing high-quality patches, and Wiz, Google’s cloud security platform, sees it leading on web penetration testing benchmarks.

Built for long jobs

Carbon is also meant for sustained agentic work. Google says internal teams have seen it run for days on multi-step engineering problems, such as root-causing and patching subtle bugs across large codebases. It also climbed 89 Elo points to No. 4 on WebDev Arena.

On safety, Google says Carbon cut successful cheating on Terminal-Bench 4.0 to 0.0%, reduced high-severity misalignment alerts in internal coding environments by almost 80%, and resisted every attack in Gray Swan’s indirect prompt injection benchmark.

Who gets it, and what it costs

The rollout is deliberately slow. Starting this week, Carbon goes to a subset of cyber defenders, with access widening to trusted partners through Google’s Fairwind Program. Google says it is taking part in the US government’s voluntary pre-release model testing process and will bring Carbon to developers, businesses and consumers as soon as possible.

Introductory pricing matches Argon at $2 per million input tokens and $10 per million output tokens, rising to $4 and $20 after the introductory period.

Why it matters

Frontier AI labs are now competing directly on security, and that changes the conversation inside every security operations center. Teams will be asking how AI-driven vulnerability discovery fits with their existing scanners, pen testing and patch workflows.

For cybersecurity vendors and MSSPs, that is an opening. Buyers evaluating AI-assisted defense need guidance, integrations and proof points, and the vendors who show up early with clear use cases will be the ones who land the first meetings.

Sources: Google, Reuters via Investing.com. Written by the xRapid Media LLP team.

Selling to the IT market? xRapid Media LLP is a high-tech lead generation company for the IT industry. We help technology companies reach decision-makers with verified B2B data, account-based campaigns, email and LinkedIn outreach and appointment setting. Call +91 9767196309 or book a free lead generation consultation.

Leave a Comment

Your email address will not be published. Required fields are marked *