Google DeepMind announced Gemini 4 Carbon on October 28, two weeks after Gemini 4 Argon, and positioned it as its strongest model, with the headline claims centered on cybersecurity and long-horizon agentic work. Carbon is number one on the rebuilt version five of the Artificial Analysis Intelligence Index at 59, one point ahead of Claude Opus 5.5 at 58 and two ahead of GPT-6 Astra at 57. On the cyber side, Google reports 88.2 percent on SEC-bench Pro for finding real vulnerabilities, 54.8 percent on ExploitGym for exploitation, and 71.0 percent on Collinear's CWE-bench for root-cause patching, all evaluated without guardrails. Internally, Google says Carbon more than doubles the success rate of Argon at generating secure code, and the Chrome team reported it produced high-quality patches more than ten times better than another lab's large frontier model.
The release is deliberately staged. Carbon goes first to a subset of cyber defenders through the Fairwind Program, with wider developer, business and consumer access promised as soon as possible, and Google says it is participating in the US government's voluntary pre-release testing process. Introductory pricing matches Argon at two dollars per million input tokens and ten dollars per million output tokens; Artificial Analysis lists four and twenty dollars as standard, with a fifty percent launch discount that has no stated end date. The model has a one-million-token context window and one million tokens of maximum output, takes text, image, video and speech, and outputs text.
Google also leads with alignment numbers. Successful cheating on Terminal-Bench 4.0 fell to 0.0 percent, with attempted cheating at 0.4 percent, and high-severity misalignment alerts in live internal coding environments dropped by almost eighty percent. Unsupported claims are down about twofold versus Argon, overreach fell 26 percent and under-service 29 percent, and attack success on Gray Swan's indirect prompt injection benchmark went from 0.7 percent to zero.
Independent evaluations are mostly strong but uneven. Arena has Carbon first in Text Arena and fourth in WebDev at 1,768, up 89 points. Artificial Analysis says it leads four of nine index evals and costs $7.76 per index task versus $10.04 for Opus 5.5, using 29 percent fewer output tokens. In coding agents it trails: 59 on the Coding Agent Index in Antigravity CLI versus 62 for Claude Code with Opus 5.5, and 61.2 percent on FrontierSWE behind GPT-6 Astra, Opus 5.5 and Sonnet 5.5. One notable regression is hallucination on AA-Omniscience, which rose from Argon's 4 percent to 11 percent, still second lowest measured, and some practitioners flagged that as a concern for cyber use. Commentators also note the coding results were measured only in Google's own harness.
The broader signal is cadence. On the earnings call Sundar Pichai said AI is increasing training and launch velocity and that he expects continued acceleration over the next twelve months, and a Gemini engineer described launches as periodic checkpoints of overnight agent loops. Two frontier releases in a month, with the second gated to defenders first, shows how cyber capability is now shaping release strategy as much as benchmarks are.
- Google's own post leads with cyber-defense results and alignment metrics such as 0.0% successful cheating on Terminal-Bench 4.0, and stresses a phased, defenders-first rollout.
- The Information frames it as Google's second major model in under a month after nearly a year without a new flagship.
- Latent Space's AINews collects independent evals: first on the AA index and Text Arena, but behind Opus 5.5 and Astra on coding-agent indexes, with hallucination up from 4% to 11%.