Google Built Its Best Bug-Hunting Model. Only Cyber Defenders Get It

Google says Gemini 4 Carbon, announced October 28, 2026, is its strongest model, built to find flaws in real software, prove they can be used, and write the fixes. On Google's own numbers, run without guardrails, it scored 88.2% on SEC-bench Pro (finding real vulnerabilities), 54.8% on ExploitGym (turning a flaw into a working exploit) and 71.0% on Collinear's CWE-bench (patching). Google is giving it first to a subset of cyber defenders, then to trusted partners through its Fairwind Program; SecurityWeek reports more than 650 organizations take part. Google says developers, businesses and consumers get it after more work on guardrails, "as soon as possible."