Gemini 4 Carbon tops benchmarks at 59 on Artificial Analysis, costs $2/$10 per 1M tokens, but is locked to Google's Fairwind cyber-defender program. Here's what it means for coding.
Vamsi Tallapudi
Manager, Architect Technology at Cognizant
Gemini 4 Carbon is Google's new flagship AI model, announced October 28, 2026, just two weeks after Gemini 4 Argon shipped. It tops the Artificial Analysis Intelligence Index v5.0 with a score of 59, beats Claude Opus 5.5 (58) and GPT-6 Astra (57), and posts the best cybersecurity benchmark numbers Google has ever published. There's a catch, though: almost nobody can use it yet. Access is locked to cyber defenders in Google's "Fairwind Program," and Google still hasn't said when the rest of us get in.
I've been tracking Google's model cadence since Gemini 3, and this is the fastest back-to-back flagship release I've seen from them. Argon got general availability on October 13. Carbon showed up 15 days later. That's either a sign Google's internal training pipeline is firing on all cylinders, or a sign they rushed something out the door to reclaim the top benchmark spot from Anthropic. Probably both.
Carbon is Google DeepMind's newest frontier model, built on top of Gemini 4 Argon's architecture. Google's own framing calls it "our strongest model with state-of-the-art cybersecurity and long horizon capabilities." It's designed for agentic workflows that run "for days" without a human checking in every few minutes, plus a heavy focus on finding, validating, and patching security vulnerabilities.
That cybersecurity angle isn't a side feature. It's the headline. Google built Carbon specifically to compete in a space where Anthropic and OpenAI have been making noise about autonomous threat detection, and the benchmark numbers back that framing up.
Google is running introductory pricing for Carbon:
| Tier | Input | Output | Cached input |
|---|---|---|---|
| Introductory | $2 / 1M tokens | $10 / 1M tokens | 95% off |
| Standard (later) | $4 / 1M tokens | $20 / 1M tokens | 95% off |
Google hasn't said when the introductory window closes. Worth noting: that intro pricing is identical to what Argon launched at, so if you're already paying for Argon API access, Carbon isn't going to double your bill the way a brand-new tier sometimes does.
Here's where Carbon actually earns the hype, at least on paper.
| Benchmark | Score | What it measures |
|---|---|---|
| Artificial Analysis Intelligence Index v5.0 | 59 (#1 overall) | General reasoning/intelligence |
| SEC-bench Pro | 88.2% (up from Argon's 83.4%) | Finding real vulnerabilities |
| ExploitGym | 54.8% (up from Argon's 42%) | Validating risk through exploitation |
| CWE-bench | 71.0% | Patching at the root cause |
| WebDev Arena | +89 Elo over Argon, ranks #4 | Full-stack web dev tasks |
| Gray Swan IPI | 0.0% attack success | Blocking indirect prompt injection |
Google says Carbon leads in 15 of 17 benchmark rows it published. The two it doesn't lead on are revealing: some software engineering and computer-use tasks, and some professional-knowledge tests. And on WebDev Arena specifically, the model that's supposedly #1 in the world only ranks #4. That's a real tell that Carbon's strength is skewed hard toward security work, not general coding.
Secure code generation is where the jump is biggest: Google claims it's 2x better than Argon at writing code that doesn't introduce new vulnerabilities. The Chrome team reported Carbon generated patches more than 10x higher quality than "another lab's frontier model" (Google didn't name names, but you can guess).
This is the part that makes the whole announcement feel a little hollow. Fairwind is Google's gated early-access program for cyber defenders, think internet providers and security teams doing vulnerability research, not individual developers or businesses. Google says it's "rolling out starting this week" to that group, with plans to expand to "trusted partners" and then everyone else, but there's no public date attached to any of that.
So if you were hoping to drop Carbon into your coding workflow this week, you can't. Full stop. The model exists, the benchmarks are real, but the thing you'd actually type a prompt into isn't available to you yet.
That's not a hypothetical complaint, either, people are already annoyed about it. On the Hacker News thread covering the launch, one commenter joked that if a Google PM handed them $100 and said "go figure out how to issue a prompt to Gemini 4 Argon," they'd only be about 30% sure they could pull it off, let alone find Carbon. Google's access model across Gemini app, AI Studio, Vertex, and Workspace is genuinely confusing right now, and stacking a cyber-defender-only model on top of that doesn't help.
| Argon (GA since Oct 13) | Carbon (Fairwind only) | |
|---|---|---|
| Access | Public | Cyber defenders, gated |
| SEC-bench Pro | 83.4% | 88.2% |
| ExploitGym | 42% | 54.8% |
| Secure code gen | Baseline | 2x Argon |
| Hallucination rate (factual) | ~4% | ~11% |
| Unsupported claims | Baseline | ~2x fewer |
| High-severity misalignment alerts | Baseline | 80% fewer |
Carbon is, by Google's own numbers, a meaningfully more capable security model than Argon. It's also, by Google's own numbers, more likely to make things up when you ask it a straight factual question. An 11% hallucination rate on factual-knowledge tests, nearly triple Argon's 4%, is not a small regression. If you're using this for anything that touches real facts outside of security research, that's worth sitting with before you get excited about the benchmark chart.
Here's the honest comparison, because the two models aren't actually playing on the same field right now.
On the Artificial Analysis Intelligence Index, Carbon (59) edges out Claude Opus 5.5 (58) by one point. That's close enough that I wouldn't call it a decisive win either way, it's within noise on a single composite score.
But Opus 5.5 is the one you can actually use today for day-to-day coding. I've had it running against our team's Next.js codebase for a few weeks now, and on Anthropic's own published numbers it scores 66.4% on Terminal-Bench 4.0 and 57.8% on CursorBench 4.0, ahead of GPT-6 Astra and well ahead of its own predecessor, Opus 5. Carbon hasn't published comparable general-coding accuracy scores, Google's coding claims for Carbon are framed around security patching and WebDev Arena, where it only lands at #4.
So if you're picking a model for a normal coding workflow this week, Carbon isn't a contender. Not because it's weaker, nobody outside Fairwind actually knows that, but because it's not available. Opus 5.5 is already in Claude Code, already priced, already shipping real PRs. That's the whole argument, and it's a boring one, but it's correct: the best model you can't use loses to the good model you can.
If your job is specifically vulnerability research or patch generation at scale, Carbon's SEC-bench and ExploitGym numbers are a real reason to apply for Fairwind access. For everyone else writing application code, stick with what's shipping.
If you write security tooling for a living, apply to Fairwind now, the benchmark jump on vulnerability detection and patching is the real deal and worth the wait. If you're a regular developer picking between Gemini and Claude for your actual job, ignore Carbon entirely until Google gives it a release date. Use Argon if you're in the Gemini ecosystem already, or Opus 5.5 if you want the strongest model that's actually sitting in your terminal right now.
My honest read: Google shipped this announcement to win a benchmark news cycle, not to give developers a new tool. That's a legitimate move, Carbon's security numbers are genuinely the best Google has published, but don't confuse "announced" with "available." We've seen this pattern before with Gemini releases, and it tends to take Google weeks to months to go from "trusted partners" to a public API key.
Gemini 4 Carbon is Google DeepMind's newest frontier AI model, announced October 28, 2026. It ranks #1 on the Artificial Analysis Intelligence Index v5.0 (59 points) and focuses on long-horizon agentic work and cybersecurity, scoring 88.2% on SEC-bench Pro and 54.8% on ExploitGym.
Introductory pricing is $2 per million input tokens and $10 per million output tokens, with a 95% discount on cached inputs. Standard pricing rises to $4 and $20 per million tokens after the introductory period, though Google hasn't said when that ends.
Only cyber defenders enrolled in Google's Fairwind Program, a gated early-access group that includes organizations like internet service providers doing security research. Google says it will expand to "trusted partners" and then the public, but gave no firm date.
Carbon scores 59 on the Artificial Analysis Intelligence Index vs Opus 5.5's 58, a one-point edge. But Opus 5.5 is publicly available today and posts 66.4% on Terminal-Bench 4.0, while Carbon's coding-specific numbers are limited to security patching and a #4 WebDev Arena rank.
On security-related coding tasks, yes, Carbon doubles Argon's secure code generation score and jumps from 42% to 54.8% on ExploitGym. But Carbon's hallucination rate on factual tests rose to about 11% from Argon's 4%, so it's not a clean upgrade across the board.
Google says broad availability to developers, businesses, and consumers is coming "as soon as possible" after the Fairwind rollout and safety refinements, but it hasn't published a date. Argon took about two weeks to go from preview to general availability, so Carbon could follow a similar timeline, or take longer given its gated start.
Want more on where Google's model lineup stands? Check out our breakdown of Gemini 4 Argon vs Claude Opus, the Claude Opus 5.5 launch, and our August 2026 AI model releases recap for the bigger picture on this release cadence.
New AI tools, automation workflows, and course drops — straight to your inbox. Join 2,400+ builders.
LearnHarness is a free, open-source AI tutor app that measures what you know, plans a lesson, teaches it, and drills you, backed by a persistent knowledge graph.
Apple blocked eMudhra's hacked CA certs in Safari on Oct 19, but git, curl and python3 on macOS still trust them. Here's how to check and fix it yourself.
Ghostty 1.4 cuts terminal memory up to 90%, adds full Kitty graphics with animation, a built-in ghostty +ssh wrapper, and better Claude Code support.
Comments