Google has announced a powerful new Gemini model, but there is a catch for anyone eager to try it: Gemini 4 Carbon is not a general public release. In its October 28 announcement, Google said it would begin by offering the model to a selected group of cyber defenders, expanding later to trusted partners and eventually ordinary developers and customers.
Why is Google starting with cybersecurity teams?
Carbon is designed for complex engineering projects that unfold over many steps, including finding software vulnerabilities, checking them and developing patches. Those capabilities can help defenders, but they also require careful access controls. Google says it is participating in voluntary pre-release government testing and collecting feedback before widening access.
What do the benchmarks say?
Google reports 88.2% on SEC-bench Pro, 54.8% on ExploitGym and 71% on CWE-bench. It also reports improvements in prompt-injection resistance and instruction compliance. These are company-reported results, and readers should not assume they guarantee equivalent outcomes on their own systems. Google’s release also points to an independent Artificial Analysis index ranking, but a ranking is not a substitute for testing in production.
Can developers buy API access today?
Not generally. Google says Carbon will launch with introductory API pricing of $2 per million input tokens and $10 per million output tokens; after the introductory period, it lists $4 and $20. That is a future pricing announcement, not evidence that a public API is currently available.
What is still unknown?
Google has not provided a firm public launch date, the size of its early-access group, or final usage limits. For teams planning projects, the practical advice is to treat Carbon as an announced, restricted-access model until Google confirms broader availability.
Bottom line
The story is not simply that another frontier AI model exists. It is that Google is testing a deliberately staged launch for a model with consequential cyber capabilities. Security teams should watch the access criteria; everyone else should watch for an actual release.
Primary source: Google’s October 28 announcement.
