Google DeepMind Unveils Gemini 4 Carbon: Frontier Cybersecurity and Long-Horizon Coding

Wynex Editorial · Oct 30, 2026 · 6 min read

Google DeepMind just dropped Gemini 4 Carbon, its most capable frontier AI model yet. It is built to handle complex, long-horizon engineering problems and autonomous cybersecurity defense. Coming just two weeks after Google's Gemini 4 Argon, Carbon hits the #1 spot on the Artificial Analysis Intelligence Index v5.0. For development agencies and engineering teams building heavy software, Carbon marks a real shift toward agentic systems that run for days instead of seconds.

What was announced

Announced by Koray Kavukcuoglu, SVP at DeepMind and Chief AI Architect at Google, Carbon is built specifically for coding, multi-step agentic workflows, and end-to-end security defense. Alongside top-tier benchmark scores, DeepMind kept pricing identical to Argon so high-level reasoning stays affordable at scale.

Here are the core operational facts:

Benchmark leadership: Carbon scored 59 on v5.0 of the Artificial Analysis Intelligence Index, taking the global #1 spot.
Pricing: It matches Argon at $2 per million input tokens and $10 per million output tokens.
Caching discount: Cached input tokens get a 95% discount off standard rates.
Rollout plan: Access starts with cyber defenders, moves to trusted partners through the Fairwind Program, and then opens to general developers.
Testing compliance: DeepMind is working with the U.S. government's voluntary pre-release model evaluation framework to stress-test safeguards before general release.

What's new in Gemini 4 Carbon

Carbon brings measurable jumps over older models, especially in sustained autonomous execution, vulnerability handling, and model alignment. DeepMind showed real architectural gains across both internal tests and external evals.

Full-lifecycle cybersecurity

Unlike models trained on basic static scans, Carbon works across every stage of defensive engineering—from finding flaws to validating them and writing the patches.

Vulnerability discovery: Carbon scored 88.2% on SEC-bench Pro, finding complex flaws hidden inside large, real-world codebases.
Exploit validation: On ExploitGym, it hit 54.8%, letting security teams check if a bug is practically exploitable before fixing it.
Automated patching: It scored 71.0% on Collinear's CWE-bench, turning verified vulnerabilities into production-ready patches at the root cause.
Real-world patch quality: Google's Chrome team found Carbon performed more than 10x better than another lab's frontier model at writing top-tier security patches. Wiz also noted Carbon led benchmarks for web pen testing during their Scan for Good initiative.
Secure code generation: Internal tests showed a 2x uplift in secure code output compared to Argon.

Long-horizon engineering and web development

DeepMind built Carbon to handle multi-step problems that usually break standard LLMs. In tests, Carbon ran autonomously for days, pushing past dead ends to trace root causes and fix subtle bugs across sprawling repos.

On full-stack evaluations, Carbon jumped +89 Elo points to take the #4 spot (1768 Elo) on WebDev Arena, showing cleaner code output, better multimodal understanding, and reliable full-stack app building.

Frontier alignment and prompt injection resistance

Agentic software running for hours creates real security risks if models hallucinate or fall for prompt manipulation. DeepMind built Carbon into a multi-layered safety stack that delivers real gains in model honesty:

Zero prompt injection vulnerability: On Gray Swan's Indirect Prompt Injection (IPI) Benchmark, Carbon hit an attack success rate of 0.0% (down from Argon's 0.7%), blocking every test attack.
No test shortcuts: Carbon dropped cheating attempts on Terminal-Bench 4.0 to 0.0% (overall cheating dropped to 0.4%) while boosting execution accuracy.
Fewer high-severity alerts: During live coding sessions with internal teams, high-severity misalignment alerts dropped by almost 80%.
Halved unsupported claims: Carbon cut fabrications roughly in half (2x reduction) compared to Argon, choosing to state missing prerequisites rather than guessing.
Balanced execution: Carbon achieved a 26% reduction in overreach and a 29% reduction in under-service, making sure multi-step agents stick to their assigned scope.

What it means for businesses and developers

For engineering leaders and development agencies balancing fast delivery with enterprise compliance, Carbon sets a practical standard for real-world automation.

Moving from static linting to autonomous patching: Teams spend hours triaging vulnerability alerts. With Carbon hitting 88.2% on SEC-bench Pro and 71.0% on CWE-bench, you can start using automated pull requests to find, test, and patch CVEs before shipping code.
Reliable long-running agents: Older generative models often drifted off-task during complex scripts. Carbon's ability to maintain focus over multi-day debugging tasks without taking shortcuts makes autonomous refactoring practical for legacy codebases.
Hardened integration pipelines: As companies connect microservices, autonomous agents become targets for malicious payloads. When engineering defenses like hardening webhook security, pairing strict validation with an agent that has a 0.0% prompt injection success rate drastically shrinks your attack surface.
Budget predictability with token caching: At $2/$10 per million tokens and a 95% discount on cached inputs, your team can pass large system prompts and repository maps into context over and over without blowing up your API bill.

How to try it or prepare

Because DeepMind is rolling out Carbon alongside U.S. government pre-release testing, direct access is currently limited to specific programs before opening to general developer dashboards.

Apply through the Fairwind Program: Security organizations and cyber defense teams should check eligibility for Google's Fairwind Program to get access during the rollout.
Audit code repository documentation: Because Carbon actively pulls in sources and asks clarifying questions when things are ambiguous instead of guessing, standardize your internal docs, ADRs, and unit tests to get the best results.
Architect for prompt caching: Review your agent workflows to separate static system instructions and dependency maps from dynamic user queries. That way, you are ready to take advantage of the 95% cached token discount as soon as the model opens up.

The takeaway

Gemini 4 Carbon represents a mature evolution in frontier AI. By pairing #1 overall intelligence benchmarks with practical breakthroughs in cybersecurity, prompt-injection defense, and multi-day agentic endurance, Google DeepMind has delivered a system built for genuine production utility rather than benchmark vanity. As access expands beyond the Fairwind Program to developers worldwide, Carbon stands ready to change how engineering teams find flaws, write software, and defend infrastructure.

Source

Google DeepMind — Gemini 4 Carbon: Our next frontier model