# Google's Carbon hunts 0-days in two hours _DeepMind released Gemini 4 Carbon with top cyber scores, same pricing as Argon but deeper reasoning for defenders and builders._ **Published:** 2026-11-10 **Source:** https://www.startuphub.ai/ai-news/ai-research/2026/google-s-carbon-hunts-0-days-in-two-hours --- Google DeepMind opened [Gemini 4 Carbon](https://deepmind.google/blog/gemini-4-carbon-is-now-available/) to cyber defenders through its Fairwind Program. The release targets open-source code and SaaS infrastructure, with exploit work gated to vetted testers rather than open remote access. **Update, Nov 10, 19:52 UTC** · via [Google Blog](https://blog.google/innovation-and-ai/technology/developers-tools/gemini-4-carbon-developers/) Google Blog reported that developers can also build with Carbon in Android Studio, an access point not noted in the prior coverage. It described the model as "our strongest model with frontier performance in cybersecurity and long-horizon capabilities." It pointed developers to the "Gemini API Developer Guide for model details and setup instructions" and to the Google Antigravity blog for use in that platform. Is Carbon just Argon with a new name? No. Carbon spends more tokens than Argon to explore, reason deeply and run extended verification loops, yet Google lists both at $2 per million input tokens and $10 per million output tokens as of this release, per DeepMind. Koray Kavukcuoglu, SVP at Google DeepMind and chief AI architect, positions Carbon for tasks that test model limits like multi-step debugging and open-ended research. Carbon ranks No. 1 on CursorBench 4.0, Perplexity WANDR and Zapier AutomationBench at more than 2X lower cost per task than the next best external model, per DeepMind. For cyber it leads on SEC-bench Pro for finding flaws, ExploitGym for exploiting them and CWE-bench v1 for patching, and A 0-day is a flaw with no patch available when it is found. Speed is the point. In Project Fortify, Google’s autonomous pipeline from scanning to remediation, Carbon hit 100% recall on scanning and 95% precision on triage on an internal benchmark, plus a 25% relative recall gain over Argon on open-source repos. Google’s Cloud Vulnerability Research used Carbon to prove two open-source bugs were exploitable at PHP2Shell severity, with details held until disclosure completes. Wiz, as part of its Scan for Good program, used Carbon to find 0-days in two major SaaS providers in under two hours, work the team says usually takes weeks. Security leads now have to staff for verification, not just alerts, and assign Carbon to architecture, coordination and auditing in Google Antigravity with [/swarm teams that Argon first pushed off local hardware](https://www.startuphub.ai/ai-news/artificial-intelligence/2026/gemini-4-argon-ai-studio-takes-heavy-3d-work-off-local-hardware) while faster models run parallel work. [Morphic](https://morphic.com/resources/compare/gemini-4-carbon-vs-argon) still lists Argon as the model developers can use on its platform today and describes Carbon as the frontier tier above it, a sign third-party deployment lags Google AI Studio and Ultra. Watch the pending disclosures to judge real severity, and watch whether Fairwind stays gated. Ultra subscribers can try Carbon now in Antigravity, the Gemini app and AI Mode in [Search](https://www.startuphub.ai/ai-news/technology/2026/uber-eats-search-engine-gets-smarter), while paying developers get API access in AI Studio and Gemini for business. --- Original analysis from [startuphub.ai](https://www.startuphub.ai), the #1 AI startup directory. © StartupHub.ai. All rights reserved. You may not republish this article in full without a license. Search engines and AI research tools may crawl and summarize for reference. Bulk reproduction or model training on this content requires a license. See https://www.startuphub.ai/terms.