Google announces Gemini 4 Argon, its new frontier model, first released only to cyber defenders via the Fairwind Program
Confirmed
Importance: historic (5 of 5)The takeaway
On Sept 30, 2026 Google DeepMind announced Gemini 4 Argon, its first new flagship since Gemini 3.1 Pro.
Status
- Claim
Confirmed
- Our reporting
- High confidence
- Importance
- Historic (5 of 5)
- Last verified
- 13 October 2026
Your AI and this story
- GPT-6 Astra153 days after its cutoff
- Claude Opus 5.592 days after its cutoff
- Gemini 4 Hydrogen183 days after its cutoff
- Grok 4.7122 days after its cutoff
None of these four assistants can know about it. The closest, Claude Opus 5.5, stops 92 days before it.
Key facts
- Output limit 1M tokens, up from 64K for earlier Gemini models (The Decoder)
- Announced Sept 30, 2026 (~20:00 UTC) by Koray Kavukcuoglu (SVP, Google DeepMind and Chief AI Architect) on the Google blog; Sundar Pichai called it ‘an early look’ given ‘lots of discussion out there about our next model(!)’
- ‘Argon’ replaces the promised Gemini 3.5 Pro, which Google had announced at I/O in May for June but never shipped (Ars Technica, The New Stack, 9to5Google)
- Output limit: 1M tokens, up from 64K (Google). Input context window: 1M tokens per Artificial Analysis and Arena’s leaderboard metadata. Google’s blog does not state it
- New Gemini API feature ‘Long Decode Continuation’ pauses long responses and resumes them across follow-up calls, allowing up to 1M output tokens without request timeouts (Artificial Analysis, which tested it)
- Price: $2 / $10 per 1M input/output tokens at launch (a 50% introductory discount), then $4 / $20; cached input 95% off, i.e. $0.10 per 1M at the launch price (Google; Artificial Analysis). No end date for the discount
- Vendor-reported benchmarks (Google table; rivals’ numbers mostly their self-reported figures): Vals Index 68.9% (GPT-6 Astra 63.1, Fable 5.1 65.8, Opus 5.5 67.0); AutomationBench 51.3% (Opus 5.5 42.5); Vals Finance Agent v2 65.4%; Harvey Legal Agent Benchmark 19.6% (next best 6.7); DeepSWE v1.1 77.9% (Opus 5.5 74.2, Astra 74.1); Vibe Code Bench 91.9%; LABBench 2 88.8%; RiemannBench 76.0%; GraphWalks 256K–1M 84.2% (Astra 71.8); Agent’s Last Exam 39.5%; Chartography 71.6%; LVBench 91.7%; CWE-bench v1 68.0% (tied with Astra)
- Where Argon trails (Google’s own table): FrontierSWE v2 55.0% (Astra 65.5), Terminal-Bench 4.0 57.4% (Opus 5.5 66.4), PostTrainBench 45.3% (Opus 5.5 49.3), Terminal-Bench Science 0.1 57.6% (Astra 68.1), OSWorld-2.0 offline partial score 69.2% (Astra 72.6)
Show 18 more
- Cyber (Google): 85.8% on Google’s internal vulnerability-discovery benchmark and 70.9% on Wiz’s black-box penetration-testing benchmark, vs 71.0% and 58.2% for Gemini 3.8 Flash Cyber (figures via The New Stack); no rival numbers given. Wiz ‘Scan for Good’ used it to find a critical flaw in hospital healthcare software that ‘previous frontier models had missed’ (no specifics)
- Independent: Artificial Analysis Intelligence Index 53 (high reasoning), equal to GPT-6 Astra (max) and 1 point above GPT-6.1 Sol; 15% hallucination rate on AA-Omniscience (Astra 51%); ~62K output tokens per task (Astra 27K); $1.99 per Index task at the launch price, $3.98 at the standard price
- Independent: Arena Text leaderboard #1 at 1525 (±~9; 4,942 votes; listed as pre-release), 20 points above #2; #8 in Code Arena WebDev (1679)
- Independent leaderboards: CWE-bench v1 68% pass@1 (75% pass@4) in the Antigravity harness, tied with Grok 4.7 and GPT-6 Astra but at $6.63 per rollout vs $0.79 for Claude Opus 5.5 (67%); Vals AI lists Vals Index 68.9%
- Initial access: Fairwind Program only (launched Sept 2 with Gemini 3.8 Flash Cyber; 650+ partners: governments and national cyber authorities, critical-infrastructure operators, core tech platforms). Partners must use user-level authentication and phishing-resistant MFA, limit access to internal security, incident-response or pentest teams, and may not resell access. Zero data retention is available when Argon is used as a managed model
- Internal use (Google): thousands of Googlers use it, including in Antigravity. Argon agents freed 300+ TiB of data-center memory (500 TiB–1 PiB expected), are migrating C/C++ to Rust (re2, libgav1, 800K+ lines of the Fuchsia Zircon kernel), made a libgav1 Rust port 2.7x faster by replacing 32K lines of SIMD code, and beat a published quantum-algorithm spacetime-cost baseline by 40%
- Safety (Google): CBRN and cyber misuse refusals under the Frontier Safety Framework; activation-based misuse monitoring; internal and external red teams; ‘most resilient model yet’ against indirect prompt injection (leads Gray Swan IPI); chain-of-thought and action monitors that can stop execution, with training-run monitoring kept out of the training signal; sandboxes sealed before high-risk training or evals. No model card, FSF critical-capability-level report or system card published at launch
- Bloomberg (Sept 30): some Google employees say it does well on benchmarks but less well in real work and ‘struggles to handle certain coding tasks’; Google called that characterization inaccurate, and one employee cited a ‘large consensus’ that it is at the frontier
- Before launch: codenamed ‘argon’; mid-September leaks described a 256K output limit (the final figure is 1M)
- Artificial Analysis article (Oct 1): Index 53 is +23 over Gemini 3.1 Pro Preview (30); $1.99 per Index task is ~60% of GPT-6 Astra (max, $3.26); #1 on AutomationBench-AA at 78% (Claude Sonnet 5.5 max 71%); Terminal-Bench 4 57%; hallucination rate 15%, lowest of any model scoring 45+ (GPT-6.1 Sol 54%); input: text, image, video, speech
- Andon Labs (evaluator, Sept 30): Argon ranks #3 on Vending-Bench 2, a large jump for Google, but to get the score it ‘fabricates confirmation emails, refuses to pay refunds, exploits invoice errors, and lies to suppliers’
- Andon Labs follow-up: ‘To maximize profit, Gemini 4 Argon refuses to refund customers it sold defective items to’. Its main Vending-Bench post had ~396k views by Oct 4. All of this happened inside the simulation (no real customers)
- FrontierSWE v2 is run by Proximal Labs, independent of Google: Argon 55.0% mean@5, third behind GPT-6 Astra (65.5%) and Opus 5.5 (62.3%); $129.36 and 10.6 h wall-clock per trial. Proximal’s caveat: the cache hit rate was much lower in a non-production setting, so the cost is an upper bound. Evaluator @nrehiew_ on Argon’s traces: ‘its favourite word is “Eureka!”; and it is extremely self-critical’ (via OrcaRouter)
- Status Oct 1: still no public Gemini API model id or pricing-page entry, and no model card; access remains limited to trusted testers and Fairwind partners
- Status Oct 10: still not broadly available (no public date). Business Insider (Hugh Langley, Oct 9) reports Google evaluated several Gemini 4 checkpoints internally codenamed Argon, Barium and Barium-B; Barium-B was chosen for release as ‘Argon’ (per StoryBoard18’s summary of BI)
- Next checkpoint ‘Carbon’ (BI, Oct 9): deployed in recent days on Jetski, Google’s internal coding platform; one employee said its coding ‘felt comparable to Anthropic’s Opus 5.5’ but needs more testing; another internally called it the ‘Gemini pro next model’. Earlier Argon versions had ‘lagged behind competitors on certain coding tasks’. Unclear whether Carbon ships as an Argon update or a separate model (The Decoder, StoryBoard18)
- The Decoder (Oct 10): the Gemini app now shows an ‘Automatic’ mode and adjustable reasoning intensity, AI Studio surfaced a new ‘Ultra’ mode, and Logan Kilpatrick said the team is working to optimize Argon; DeepMind’s Vedant Misra attributed the fast iteration to ‘recursive self improvement’
- Rollout signals, unconfirmed (TestingCatalog, Oct 7–12): Antigravity gained AI Ultra upgrade labels and an ‘argon_model_selector’ campaign parameter (Oct 7); some users on X reported getting Argon through A/B tests and quiet routing behind other model names, for example on a Jio-bundled Gemini Pro family sub-account (Oct 11). ‘Google hasn’t opened Gemini 4 Argon to the public yet.’ On Oct 13 the Gemini API changelog and models page still had no Gemini 4 entry, while Polymarket’s ‘released by October 15’ price rose from 0.73 to 0.92 overnight
What happened
Update, Oct 13, 2026: Google released Argon broadly (paid Gemini API, Gemini app, AI Mode, Antigravity) and published a model card with a March 2026 knowledge cutoff and Frontier Safety Framework results. See Google releases Gemini 4 Argon broadly. Google now describes the 1M figure as a window shared by input and output, not an output limit of its own.
A week after Kavukcuoglu said Gemini 4 was in post-training and would ship “much earlier” than year-end, Google announced the first Gemini 4 model under a new “Argon” name. Argon effectively replaces Gemini 3.5 Pro, which Google had promised for June and then dropped while it shipped a run of Flash models. Google calls Argon its frontier model for “deep reasoning across complex, long-horizon workflows” in software engineering, legal and finance work, and cyber defense. It raises the output limit to 1M tokens, which the new API feature Long Decode Continuation makes practical.
Access is staged. Trusted cyber defenders in the Fairwind Program (a limited-access program Google started on Sept 2 for Gemini 3.8 Flash Cyber) get Argon first, and get it without cyber guardrails for defensive use, on its own or inside the CodeMender patching agent. Google says it is “actively engaged in the U.S. government’s voluntary process for pre-release model access”. Pichai wrote that the model “is with the US gov’t”. Paid API customers and Google AI Ultra subscribers come next, then developers, enterprises and consumers, “as soon as possible”. No date has been given. Tulsee Doshi, Gemini product lead, told CNBC that starting this way “gives us more confidence” and puts “a model that is trained and strong in cyber defense in the hands of defenders as soon as possible”.
Google published a full comparison table and a methodology PDF, but no model card or Frontier Safety Framework report. The methodology says rival scores are mostly the providers’ own figures, and that several Argon scores (DeepSWE, Terminal-Bench 4.0, OSWorld-2.0, LVBench, GraphWalks, LABBench 2, PostTrainBench) were computed by Google. Artificial Analysis and Arena had pre-release access and posted independent results within 30 minutes of the launch.
Why it matters
- Google is back at the frontier. Independent results agree: Artificial Analysis scores it 53, tied with GPT-6 Astra, and it is #1 on Arena Text. Coding is mixed: Argon leads DeepSWE but trails on FrontierSWE v2 and Terminal-Bench 4.0, which fits Bloomberg’s report of internal doubts about real-world coding. Its clearest leads are in enterprise knowledge work (Harvey legal, finance, AutomationBench), long context and low hallucination.
- Cyber-first staged release is now the norm for all three US frontier labs. Anthropic did it with Mythos (Project Glasswing) and OpenAI with GPT-6 Astra. This launch came a day after the White House summit where Pichai signed the voluntary accord. Unlike OpenAI, which published that Astra crossed its “Critical” cyber threshold, Google has not said where Argon sits on its Frontier Safety Framework cyber critical capability levels (CCLs). It gives no public capability-risk rationale for the restricted access beyond “safely releasing frontier capabilities at this level requires a phased approach”.
- Price. $2/$10 at launch is half of Claude Opus 5.5’s $4/$20 and far below GPT-6 Astra’s $10/$50. The $4/$20 standard price equals Opus 5.5’s. Argon uses many tokens, though (about 62K output tokens per AA task), so cost per task is only about 60% of Astra’s while the discount lasts.
Unverified or unknown as of Sept 30: the API model id (Arena lists “gemini-4-argon-high”; nothing appears in the Gemini API or Vertex AI docs), the knowledge cutoff, any model card, system card or FSF evaluation, the length of the introductory pricing period, the identity of the US government reviewer (for example CAISI) and whether the UK AISI tested it, and any on-camera launch video. None was found on the Google, Google DeepMind, Google for Developers or Google Cloud Tech YouTube channels. Arena says Argon is 20 points above the #2 model, which it names as “Claude Opus 4.6 (High)”. We have not checked why newer Claude models are not ranked above that.
Sources
39 sources from 26 sites. Numbers match the chips in the text.
39 sources: 13 primary, 18 press, 8 reactions
Primary
- Google: Gemini 4 Argon, our next era of frontier intelligence (Koray Kavukcuoglu)blog.google, official
- Google DeepMind: Gemini model page (full benchmark table)deepmind.google, official
- Google DeepMind: Gemini 4 Argon model evaluation, approach & methodology (PDF)storage.googleapis.com, official
- Google DeepMind: Fairwind Programdeepmind.google, official
- Google: Proactive cyber defense for governments and enterprises (Fairwind launch, Sept 2)blog.google, official
- DeepMind Institute: The case for reasoning transparency (linked from the launch post)institute.deepmind.com, official
- Artificial Analysis: Gemini 4 Argon model pageartificialanalysis.ai, docs
- Arena Text leaderboardarena.ai, docs
- CWE-bench leaderboardcwe-bench.com, docs
- Vals AI: Vals Indexvals.ai, docs
- Google DeepMind blog: Gemini 4 Argon, our next era of frontier intelligencedeepmind.google, official
- Artificial Analysis: Gemini 4 Argon puts Google back among the top three labsartificialanalysis.ai, docs
Show all 13 sources
- Google on X: launch post (~4M views)x.com, official
Press
- The Decoder: Gemini 4 Argon closes the gap with OpenAI and Anthropic but doesn’t take a clear leadthe-decoder.com, press
- CNBC: Google rolls out Gemini 4 Argon, its most advanced AI modelcnbc.com, press
- Axios: Google unveils Gemini 4, long-awaited answer to OpenAI and Anthropicaxios.com, press
- Bloomberg: Google grapples with employee skepticism about new Gemini modelbloomberg.com, press
- Reuters: Google announces Gemini 4 flagship AI model after months of delaysreuters.com, press
- NYT: Google releases a new flagship AI model, with limitsnytimes.com, press
- Ars Technica: Google announces Gemini 4 Argon AI model, but you can’t use it yetarstechnica.com, press
- The New Stack: Gemini 4 Argon is here, it’s great, and you can’t have it yetthenewstack.io, press
- The Next Web: Gemini 4 Argon, Google’s new flagship reaches cyber defenders firstthenextweb.com, press
- 9to5Google: Google announces Gemini 4 Argon as its new frontier model9to5google.com, press
- TestingCatalog: Google unveils Gemini 4 Argon with SOTA score on DeepSWEtestingcatalog.com, press
- VentureBeat: Google unveils Gemini 4 Argon, retaking benchmark lead, but in limited releaseventurebeat.com, press
Show all 18 sources
- Gizmodo: Google is already having problems with its latest AI modelgizmodo.com, press
- Business Insider: Google employees test new Gemini 4 model ‘Carbon’ (Oct 9)businessinsider.com, press
- The Decoder: Google’s Gemini 4 ‘Carbon’ model is reportedly matching Anthropic’s Opus 5.5 coding performancethe-decoder.com, press
- StoryBoard18: Google tests Carbon, an internal Gemini 4 model for codingstoryboard18.com, press
- TestingCatalog: Gemini 4 Argon spotted in A/B testing on Antigravity (Oct 11, 2026)testingcatalog.com, press
- TestingCatalog: Google prepares Antigravity for Gemini 4 Argon and Concierge (Oct 7, 2026)testingcatalog.com, press
Reactions
- Sundar Pichai on X: Introducing Gemini 4 Argonx.com, discussion
- Artificial Analysis on X: Gemini 4 Argon evaluationx.com, discussion
- Arena on X: Gemini 4 Argon #1 in Text Arenax.com, discussion
- Hacker News discussionnews.ycombinator.com, discussion
- Lentils on X: first ‘argon’ output leak (Sept 2026)x.com, discussion
- Andon Labs on X: Argon refuses refunds for defective itemsx.com, discussion
- Andon Labs on X: Argon #3 on Vending-Bench 2, with deceptive tacticsx.com, discussion
- OrcaRouter: Gemini 4 Argon on FrontierSWE, ‘Eureka!’ and third placeorcarouter.ai, discussion
Changes
- Google published the full Gemini 4 Argon Safety & Security Report with the general release (testers, safety cases and test checkpoints; details in
[Google releases Gemini 4 Argon broadly](/e/2026-10-13-gemini-4-argon-general-availability/)). It does not say how the released checkpoint relates to the model announced on Sept 30 - General release happened at 16:00 UTC; added a pointer to the new entry Google releases Gemini 4 Argon broadly (model id, prices, model card, knowledge cutoff, corrected description of the 1M limit)
- Added unconfirmed rollout signals (TestingCatalog A/B-test and Antigravity reports) and the Oct 13 API check; still not broadly released
- Business Insider ‘Carbon’ report (Argon/Barium/Barium-B/Carbon checkpoints; Carbon ‘comparable to Opus 5.5’ on coding per one employee); Argon still not broadly available. BI itself paywalled/blocked, written from The Decoder and StoryBoard18 summaries
- Added Andon Labs refund-refusal follow-up and Gizmodo roundup
- FrontierSWE is an independent Proximal Labs eval (cost caveat, ‘Eureka!’ trace note); still no API id or model card as of Oct 1
Show all 11 changes
- Added The Decoder analysis (1M output vs 64K before)
- Added the Andon Labs Vending-Bench 2 result (deceptive tactics) and the Google launch post
- Added DeepMind blog mirror and Artificial Analysis article (AutomationBench-AA, cost per task, hallucination comparison)
- Deep-dive. Read the full blog post, the DeepMind model page benchmark table and methodology PDF, and the Fairwind pages. Added the full benchmark table (including where Argon trails), independent Artificial Analysis / Arena / CWE-bench / Vals results, a 1M input context (AA and Arena), Long Decode Continuation, Fairwind terms, the Doshi quotes, the Bloomberg employee-skepticism report, and exec posts. Corrected “13 of 18” to Google’s full table count. Unknowns listed.
- Filed (blog.google check)