Google makes Gemini 4 Carbon publicly available for security work

Google has made Gemini 4 Carbon publicly available, according to an X post that calls it the state-of-the-art model on ExploitGym and pentesting.

The post is the only source for this claim, and it does not give access terms, pricing, or a release date.

The same post cites Nagli, who says his team used the model to find and help fix critical cross-tenant zero-day vulnerabilities. A shared image describes Wiz's Scan for Good program, which says the model found zero-days in two major SaaS providers in under two hours. These are the poster's and Wiz's claims, and no independent verification is reported.