2026年10月28日
|
Gemini 4 Carbon 是我们最强的模型，具备最先进的网络安全能力和长时程能力。
今天，我们宣布推出下一代前沿模型：Gemini 4 Carbon，这是我们最强的模型，具备最先进的网络安全能力和长时程能力。
Carbon 在最近更新的 v5.0 Artificial Analysis Intelligence Index 上以 59 分排名第一。它在编码和智能体任务上，以及在网络安全防御至关重要的关键能力上都展现出显著提升，在用于发现漏洞的 SEC-bench Pro（88.2%）、用于漏洞利用的 ExploitGym（54.8%）和用于修补的 CWE-bench（71.0%）上均取得明显领先。在内部基准测试中，Carbon 在生成安全代码方面带来强劲提升，并且在我们自己团队的实时编码环境中，它表现出更低的对齐偏差和捏造率。
基于两周前发布的 Gemini 4 Argon，Carbon 展示了我们推进前沿的速度。我们的研究人员和模型携手并进，以更快的速度提升能力，同时同步加强我们的防护措施。
我们正在采取审慎的发布方式，并积极参与美国政府自愿性的发布前模型测试流程。从本周开始，我们将向一部分网络防御人员提供 Carbon，并通过我们的 Fairwind Program 逐步向更多可信合作伙伴开放访问。我们将继续收集反馈并迭代防护措施，然后尽快通过我们的产品界面向开发者、企业和消费者提供 Carbon。
Gemini 4 Carbon 将以与 Argon 相同的 introductory price 1 发布，即每百万输入 token 2 美元、每百万输出 token 10 美元，缓存输入 token 的价格为输入 token 价格的 95% 折扣。
改进编码和推理能力，以应对具有挑战性的长时程任务
Carbon 旨在处理更困难、更长时程的工程问题，专为持续性的智能体工作流而构建。在内部，我们的团队已经看到 Carbon 连续运行数天，在陷入死胡同时仍坚持不懈，以处理复杂的多步骤工程任务，例如在大型代码库和底层系统中对细微缺陷进行根因分析和修补。
基于用户反馈，我们专注于改进模型在多个领域中的表现，包括编码、智能体和科学任务，以及全栈 Web 开发和多模态理解。随着 Web 开发中输出和产物的质量提升，Carbon 跃升 +89 elo 分，以第 4 名（1768 分）登上 WebDev Arena。
最先进的网络安全性能，助力构建安全系统
Gemini 4 Carbon 在网络安全能力方面实现了重大飞跃。它在网络安全防御生命周期的各个阶段——漏洞检测、验证和修复——都达到了最先进的性能。
我们的团队已经在网络防御中看到强劲收益。在内部基准测试中，Carbon 在生成安全代码方面的成功率相比 Argon 提升了 2 倍以上。再举一个例子，Chrome 团队报告称，在生成高质量补丁时，Carbon 的表现比另一家实验室的大型前沿模型好 10 倍以上。我们领先的云安全平台 Wiz 也观察到，Carbon 在 Web 渗透测试基准上处于领先地位，而这是 Wiz's Scan for Good 计划的核心能力。
Carbon 在关键外部基准测试中表现出色（评估时未启用防护措施）：
- 发现真实漏洞： 网络安全防御的核心是发现真实漏洞。Carbon 在 SEC-bench Pro 上达到最先进的 88.2%，能够自主发现埋藏在真实世界软件中的复杂缺陷。
- 通过漏洞利用验证风险： 为了确定哪些漏洞应优先修复或是否应修复，网络防御人员越来越依赖模型来检查哪些漏洞可被利用。Carbon 在流行的漏洞利用基准 ExploitGym（54.8%）上创下新的最先进水平。
- 从根因处修补： 最终，在识别漏洞之后，修复根因是网络安全防御生命周期中的关键一步。Carbon 在 Collinear 的 CWE-bench 上达到 71.0%，可将已验证的发现直接转化为可用的代码修复。
推进前沿模型的安全与保障
Gemini 4 Carbon 建立在与 Argon 相同的多层安全与保障技术栈之上——结合了模型训练、实时滥用防御、提示注入韧性和思维链监控。特别是在模型对齐方面，我们随 Argon 取得了重大进展，并在我们的 Safety and Security report 中报告了其以对齐方式行事的倾向。借助 Carbon，我们挑战自己在对齐方面更进一步，并训练模型以正确方式响应复杂或高压任务。
- 减少捷径和漏洞利用： 借助 Carbon，我们进一步减少了训练中的捷径尝试，同时确保了高质量的编码性能。Carbon 将 Terminal-Bench 4.0 上的成功作弊率降至 0.0%，作弊尝试降至 0.4%——同时提升了整体准确率。在与我们内部团队进行的实时编码环境中，我们观察到高严重性错位警报减少了近 80%。
- 更高的透明度和诚实性： 在我们的内部测试中，Carbon 将无依据声明的数量较 Argon 减少了约 2 倍。它直接将方法上的注意事项写入交付成果，或在阻止某些操作时明确列出仍需完成的事项，而不是捏造或围绕缺失证据含糊其辞。
- 在模糊情况下改善与用户的协作： Carbon 不会猜测或强行推进某条路径，而是先检索相关来源并向用户呈现差异，然后再采取行动——因此，用户应当会体验到与 Carbon 更好的协作体验。
- 有始有终而不越界： Carbon 同时将越界行为减少了 26%，将服务不足减少了 29%，从而在多步骤计划的端到端执行上更加可靠，同时尊重项目约束并严格保持在范围内。
- 抵御提示注入： 虽然 Argon 此前以 0.7% 的极低攻击成功率在 Gray Swan 的间接提示注入（IPI）基准测试中领先，但 Carbon 达到了 0.0%——抵御了每一次评估的攻击尝试。
即将面向开发者、企业和消费者推出
推动前沿需要快速行动，同时在部署上保持审慎。借助 Gemini 4 Carbon，我们的目标是在软件工程和网络安全防御方面实现有意义的飞跃，同时不牺牲安全性或可靠性。我们渴望看到首批网络防御者如何使用这一模型，并期待很快将 Carbon 带给开发者、企业和消费者。
Oct 28, 2026
|
Gemini 4 Carbon is our strongest model with state-of-the-art cybersecurity and long horizon capabilities.
Today, we’re announcing the next frontier model: Gemini 4 Carbon, our strongest model with state-of-the-art cybersecurity and long horizon capabilities.
Carbon ranks #1 on the recently updated v5.0 of Artificial Analysis Intelligence Index at 59. It shows significant gains across coding and agentic tasks as well as across key capabilities critical for cybersecurity defense, landing a firm lead in SEC-bench Pro (88.2%) for finding vulnerabilities, ExploitGym (54.8%) for exploitation, and CWE-bench (71.0%) for patching. On internal benchmarks, Carbon drives a strong uplift in generating secure code, and in live coding environments with our own teams it shows reduced misalignment and fabrication rates.
Building on Gemini 4 Argon, which was launched two weeks ago, Carbon illustrates the pace at which we’re pushing the frontier forward. Our researchers and models are working hand in hand to advance capabilities faster, while strengthening our safeguards in tandem.
We're taking a deliberate approach to rollout and are actively engaged in the U.S. government’s voluntary process for pre-release model testing. Starting this week, we will make Carbon available to a subset of cyber defenders and will gradually phase access to additional trusted partners through our Fairwind Program. We’re continuing to gather feedback and iterate on guardrails before making Carbon available to developers, businesses, and consumers via our product surfaces as soon as possible.
Gemini 4 Carbon will launch at the same introductory price 1 as Argon at $2 per million input tokens and $10 per million output tokens, with cached input tokens priced at 95% off input token price.
Improving coding and reasoning for challenging, long-horizon tasks
Designed to take on much harder, long-horizon engineering problems, Carbon is built for sustained agentic workflows. Internally, our teams have seen Carbon run for days to persist through dead ends to tackle complex, multi-step engineering tasks like root-causing and patching subtle bugs across large codebases and low-level systems.
Building on user feedback, we focused on improving model performance across a variety of domains, including coding, agentic, and scientific tasks, as well as full-stack web development and multimodal understanding. With improved quality of output and artifacts in web development, Carbon jumps +89 elo points to land at #4 (1768) on WebDev Arena.
State-of-the-art cybersecurity performance to help build secure systems
Gemini 4 Carbon delivers a significant leap in cybersecurity capabilities. It achieves state-of-the-art performance across the cybersecurity defense lifecycle — vulnerability detection, validation, and remediation.
Our teams are already seeing strong gains in cyberdefense. On internal benchmarks, Carbon achieves more than 2x uplift in success rate for generating secure code over Argon. As another example, the Chrome team has reported that Carbon performed more than 10X better than another lab's large frontier model when generating high quality patches. Wiz, our leading Cloud security platform, also observes Carbon leading on benchmarks for web penetration testing, a core capability for Wiz's Scan for Good initiative.
Carbon excels across key external benchmarks (evaluated without guardrails):
- Finding real vulnerabilities: Core to cybersecurity defense is finding real vulnerabilities. Carbon achieves a state-of-the-art 88.2% on SEC-bench Pro, autonomously uncovering complex flaws buried in real-world software.
- Validating risk through exploitation: To prioritize which vulnerabilities to remediate first or remediate at all, cyber defenders increasingly rely on models to check which vulnerabilities are exploitable. Carbon sets a new state-of-the-art on the popular exploitation benchmark ExploitGym (54.8%).
- Patching at the root cause: Ultimately after identifying the vulnerabilities, fixing the root cause is a critical step in the cybersecurity defense lifecycle. Carbon reaches 71.0% on Collinear’s CWE-bench, turning validated findings directly into working code fixes.
Advancing frontier model safety & security
Gemini 4 Carbon builds on the same multi-layered safety and security stack of Argon — combining model training, real-time misuse defenses, prompt-injection resilience, and chain-of-thought monitoring. In particular, we made significant strides in model alignment with Argon, and reported its propensities to behave in an aligned way in our Safety and Security report. With Carbon, we challenged ourselves to go a step further on alignment, and trained the model to respond to complex or high-pressure tasks in the right way.
- Reducing shortcuts and loophole exploitation: With Carbon, we further mitigated shortcut attempts in training while ensuring high-quality coding performance. Carbon reduced successful cheating on Terminal-Bench 4.0 to 0.0%, with attempts to cheat dropping to 0.4% — all while improving overall accuracy. In live coding environments with our internal teams, we observed that high-severity misalignment alerts dropped by almost 80%.
- Greater transparency and honesty: In our internal testing, Carbon cuts unsupported claims by approximately 2x over Argon. It puts methodological caveats directly into the deliverable or withholds blocked actions with a clear list of what remains required, rather than fabricating or hedging around missing evidence.
- Improved collaboration with the user in the face of ambiguity: Rather than guessing or forcing a path forward, Carbon retrieves the relevant sources and surfaces discrepancies to the user before acting — as a result, users should observe a much better collaborative experience with Carbon.
- Following through without overstepping: Carbon simultaneously reduced overreach by 26% and under-service by 29% resulting in much more reliable execution of multi-step plans end-to-end while respecting project constraints and staying strictly within scope.
- Resisting prompt injection: While Argon previously led the Gray Swan’s Indirect Prompt Injection (IPI) Benchmark in prompt injection resistance with a very low 0.7% attack success rate, Carbon achieves 0.0% — resisting every evaluated attack attempt.
Coming soon to developers, businesses, and consumers
Pushing the frontier forward requires moving fast while remaining deliberate about deployment. With Gemini 4 Carbon, our goal is to deliver meaningful leaps in software engineering and cybersecurity defense without compromising on safety or reliability. We’re eager to see how the initial cohort of cyber defenders use this model and we look forward to bringing Carbon to developers, businesses, and consumers soon.
本文内容采集自官方网站，排版和翻译可能与原页面存在差异。
阅读官方全文