# Google makes Gemini 4 Carbon publicly available for security work

> Original title: Gemini 4 Carbon is now publicly available - It's the world SOTA model on ExploitGym and pentesting. We used the model to find and help fi...

- Source: X search: AI availability posts (now available, public beta)
- Published: 2026-11-10T16:25:06.000Z
- Bad Influence: https://badinfluence.news/items/uol2vzlo8yeneig8qxmoogw2p
- Original: https://x.com/galnagli/status/2120191027525067042

## Summary

Google has made Gemini 4 Carbon publicly available, and the post says it is the state-of-the-art model on ExploitGym and pentesting. Nagli says his team used it to find and help fix critical cross-tenant 0-day vulnerabilities, and the attached image describes Wiz's Scan for Good program, where the model found 0-days in two major SaaS providers in under two hours.

## Why it matters

The post links the release to a Wiz Scan for Good case where the model found 0-day vulnerabilities in SaaS providers' infrastructure, showing a concrete security use.

## Post

Gemini 4 Carbon is now publicly available - It's the world SOTA model on ExploitGym and pentesting. We used the model to find and help fix critical cross-tenant 0-day vulnerabilities, every new iteration directly contribute to defending critical systems.

https://blog.google/innovation-and-ai/models-and-research/gemini-models/gemini-4-carbon-now-available/

![](https://badinfluence.news/api/img-proxy?u=https%3A%2F%2Fpbs.twimg.com%2Fmedia%2FHWxtDSHWQAAxTBE.jpg&mode=thumb&exp=1794528000&sig=c718780bf53d2ab2)

## Quoted post @galnagli

> I'm really enjoying Gemini 4 Carbon, I always find myself asking it how it figures out its way to complex chains - never had so many novel discoveries while bug hunting 
> 
> If you’re still not using AI to protect and patch your own public web apps, you should’ve started yesterday.

https://x.com/galnagli/status/2116479102442234094