The short version: Gemini 4 Carbon, announced by Google on October 28, is now the top-scoring AI model on the Artificial Analysis Intelligence Index, and no small business can use it yet. It goes first to cyber defenders in Google’s Fairwind Program, whose terms forbid any partner from sharing, reselling or redistributing access. That means nobody can legitimately sell you Gemini 4 Carbon this month, and anyone who claims to is worth a second question.
The part that reaches your budget sooner sits on a different page. Google says Carbon will launch at Argon’s “introductory price” of $2 per million input tokens and $10 per million output tokens. Google’s own Gemini API pricing page, read on October 29, 2026, puts a date on that word: the $2 and $10 rates run through November 30, and on December 1 Gemini 4 Argon goes to $4 and $20. The Carbon announcement mentions only “after the introductory period expires.” If your software runs on Argon today, its model bill doubles in 33 days unless something changes.
What is Gemini 4 Carbon?
Gemini 4 Carbon is Google’s newest frontier model, announced in a post by Koray Kavukcuoglu, Google DeepMind’s chief AI architect, two weeks after Gemini 4 Argon reached the public. Google describes it as built for long, multi-step engineering work and for cybersecurity defense. It scores 59 on version 5.0 of the Artificial Analysis Intelligence Index, first on that board.
The security numbers are the reason for the careful rollout. By Google’s account, Carbon finds real software vulnerabilities 88.2 percent of the time on SEC-bench Pro, turns findings into working exploits 54.8 percent of the time on ExploitGym, and writes correct root-cause fixes 71.0 percent of the time on CWE-bench. Google notes those external benchmarks were run without guardrails. A model that is good at finding and fixing holes is, by the same skill, good at finding and using them, which is why Google is letting defenders go first.
Two of Google’s other claims matter to anyone thinking about AI agents at work. On the Gray Swan prompt-injection benchmark, which plants hostile instructions inside content an agent reads, Google reports a 0.0 percent attack success rate for Carbon against 0.7 percent for Argon. And in Google’s internal coding environments, high-severity misalignment alerts dropped by almost 80 percent. These are Google’s measurements of Google’s model. They are worth watching for outside confirmation, not worth building a business decision on yet.
Who gets Gemini 4 Carbon first?
Starting this week, Carbon goes to “a subset of cyber defenders,” then gradually to more trusted partners through the Fairwind Program. The Fairwind page, read October 29, is more specific than the announcement about who those people are and what they agree to.
Google says it works with more than 650 partners and prioritizes three groups: governments and national cyber authorities, critical infrastructure operators such as healthcare, telecommunications, energy and financial networks, and “core technology platforms” whose software sits under millions of downstream users. Applicants go through background checks on their security history. Approved organizations may give access only to internal security, incident response or penetration testing teams, must use phishing-resistant multi-factor authentication, and must track which employees use the model.
The line that matters most to a small business is the resale ban. Google states that it does not allow partner organizations “to share, redistribute, or sell access” to its frontier models. Your IT provider may be excellent, and it may even be a Google Cloud customer, but it cannot rent you Fairwind access. If a security vendor pitches a “Gemini 4 Carbon-powered” scan of your systems before Google opens the model to businesses, ask them in writing how they have access and under which terms.
Why defenders going first is good news for a small shop
You will not run Carbon against your own systems this year, and you do not need to. The people who maintain the software you depend on are the ones in line. Google says the Chrome team found Carbon produced high-quality patches more than ten times better than another lab’s large frontier model. Fixes like that reach a three-truck plumbing company the same way every browser fix does: through an update you never think about.
We covered that delivery route in detail when OpenAI did something similar, in how AI security patches reach small businesses, and we will not repeat it here. The one caveat from that coverage still holds: patches only help the machines that install them. Automatic updates on browsers, phones and your website’s plugins are doing more for your security this fall than any model you could buy. And some fixes ship one layer below where your updates reach, as with the PHP flaws behind PHP2Shell, which is why a once-a-quarter check with your web host is still worth the email.
When will small businesses get Gemini 4 Carbon?
Google gives no date. The announcement says Carbon will reach “developers, businesses, and consumers” via Google’s products “as soon as possible,” after more feedback and work on guardrails. Google also says it is taking part in the U.S. government’s voluntary pre-release testing process.
Argon is the only precedent, and it was quick. Argon went to Fairwind defenders at the end of September, then on October 13 became available to developers through the paid Gemini API, to enterprises, and to Google AI Pro and Ultra subscribers in the Gemini app. That is about two weeks from defenders to everyone. Carbon may follow the same path or a slower one; Google has said nothing either way. If you already pay for Google AI Pro, the Gemini app is the most likely place you will meet Carbon first, and our earlier piece on which Google login decides Gemini’s data rules applies to it the moment it lands.
What does Gemini 4 Carbon cost, and what changes December 1?
Carbon has no rate card of its own yet. Google says it will launch at the same introductory price as Argon, so Argon’s published schedule is the best guide to what Carbon will cost. Here is that schedule per million tokens, read from Google’s pricing page on October 29, 2026. Output includes the model’s thinking tokens, which Google bills at the output rate.
| Gemini 4 Argon tier | Input to Nov. 30 | Input from Dec. 1 | Output to Nov. 30 | Output from Dec. 1 |
|---|---|---|---|---|
| Standard | $2.00 | $4.00 | $10.00 | $20.00 |
| Batch or Flex | $1.00 | $2.00 | $5.00 | $10.00 |
| Priority | $3.60 | $7.20 | $18.00 | $36.00 |
Every tier doubles. Cached input, which Google prices at 95 percent off, doubles too, from $0.10 to $0.20 per million tokens on the standard tier. Argon is not on the free tier at all.
Here is what that means for one realistic job. Say a home services company has an AI assistant built on Argon that reads each web lead and drafts a reply for the owner to approve. Call it 600 leads a month, about 30 each workday, with 4,000 tokens going in (the lead, the instructions, the price list) and 2,000 coming out, thinking included. That is 2.4 million input tokens and 1.2 million output tokens a month.
- Through November 30 on the standard tier: 2.4 times $2 plus 1.2 times $10, which is $16.80 a month.
- From December 1 on the standard tier: 2.4 times $4 plus 1.2 times $20, which is $33.60 a month.
- From December 1 on Batch: $16.80 a month, exactly today’s standard price.
That last line is the useful one. A lead reply should not wait, so it stays on the standard tier and costs $33.60. But anything that can run overnight (summarizing the day’s calls, sorting receipts, drafting review responses for morning approval) can move to Batch on December 1 and keep paying what it pays today. Thirty-three dollars is not a crisis for most shops. The point is that a doubling is easy to miss when it arrives as a line on a vendor invoice instead of an announcement.
Three checks for this week
Ask your software vendors which model they use. Plenty of CRMs, phone systems and marketing tools now run on rented frontier models. If one of yours runs on Gemini 4 Argon, ask whether the December 1 change will pass through to your plan, and when they would tell you.
If you or your developer call the API directly, sort the jobs now. List what must answer in seconds and what can wait until morning. The second list moves to Batch before December 1. Set a monthly spending cap in Google’s console at the same time; on a doubled rate, a runaway loop costs twice as much.
Keep the agent questions in the right order. Carbon’s prompt-injection score is encouraging, but it is a vendor’s own test of a model you cannot use yet. Until outside testers confirm it, treat any AI that reads strangers’ messages the way our piece on contact form prompt injection recommends: limit what it can reach, and keep your approval on anything that sends, pays or deletes.
None of this asks you to buy anything. The most capable AI Google has built is, for now, working on the software you already use, in the hands of people vetted to protect it. That is a reasonable order of operations, and on the evidence of Argon, the wait may be short. For how Argon behaves when it does not know an answer, see our look at Gemini 4 Argon’s hallucination rate.
Frequently Asked Questions
Can a small business use Gemini 4 Carbon today?
No. As of October 29, 2026, Google is giving Gemini 4 Carbon only to a subset of cyber defenders and, gradually, to more trusted partners in its Fairwind Program. Google has not given a date for developers, businesses or consumers, and Fairwind partners are not allowed to share, redistribute or sell access.
How much will Gemini 4 Carbon cost?
Google says Carbon will launch at the same introductory price as Gemini 4 Argon: $2 per million input tokens and $10 per million output tokens, then $4 and $20 after the introductory period. On Google’s pricing page, read October 29, 2026, Argon’s introductory rates run through November 30, with the higher rates starting December 1. Google has not published Carbon’s own dates.
Who is in Google’s Fairwind Program?
Google says it works with more than 650 partners and prioritizes governments and national cyber authorities, critical infrastructure operators such as healthcare, telecommunications, energy and financial networks, and core technology platforms whose software reaches millions of users. Applicants are background checked, and only internal security, incident response or penetration testing teams may use the model.
Should I switch my AI tools to Gemini because of Carbon?
Not on this announcement. Carbon’s benchmark results are Google’s own and the model is not available to businesses yet. A better move this week is to ask your software vendors which model they run on and whether Argon’s December 1 price change affects your plan.
Would you trust a security vendor more or less if they told you they had early access to a model like Carbon?
