Gemini 4 Carbon opens to Google AI Ultra subscribers: what actually changes
Your next creation starts with a sentence. — free credits on sign-up Bring my idea to life
Google is widening access to Gemini 4 Carbon, the model it presents as the most powerful in the Gemini family. According to CNET, Carbon is no longer limited to its initial phase aimed at cybersecurity professionals: it is now open to developers, enterprises, scientists and consumers. In practice, Google AI Ultra subscribers can use it from the Gemini app, while developers reach it through AI Studio and Android Studio.
One caveat up front: the performance claims come from Google itself. The source reports no independent testing, and the size of any lead over competing models is not detailed. Treat the promises below as vendor claims, not verified results.
What Google says Carbon can do
Per CNET, Gemini 4 Carbon is positioned across several areas:
- Knowledge work: summarising, drafting, analysing documents.
- Agentic coding: a model able to chain actions inside a development environment rather than just autocompleting code.
- Science and maths: reasoning through technical problems.
- Cybersecurity: the field that justified the first restricted-access phase.
- Spatial reasoning and physical simulations: highlighted for 3D game engines.
Google claims Carbon beats its predecessor Argon as well as models from OpenAI and Anthropic on benchmarks. Without benchmark details or margins, that superiority remains a marketing assertion to be taken with caution.
The security angle: handle the number carefully
The source states that Carbon shows a 0% success rate for prompt-injection attacks on the Gray Swan IPI test. That kind of figure impresses, but it needs context: it is one specific test, with a given methodology, not an absolute guarantee against every form of manipulation. A 0% score on a benchmark does not mean a model is invulnerable in real conditions, especially against attackers who adapt their techniques.
This figure partly explains why Google first opened Carbon to cybersecurity experts: understanding and framing sensitive uses before a broad rollout. The broader trend, CNET notes, is that AI companies are increasingly focused on reducing the risk of misuse and cyberattacks.
Who the AI Ultra subscription makes sense for
The source estimates that the average user will benefit less from the improvements than cybersecurity experts and scientists. That is an honest point to keep in mind before paying.
Profiles for whom Carbon looks relevant
- Developers: access via AI Studio and Android Studio, with an interest in agentic coding.
- Security teams: robustness evaluation, risk analysis, attack-scenario work.
- Scientists and engineers: maths, physics or simulation problems.
- 3D game creators: spatial reasoning and physical simulations.
Profiles where the gap is less clear
- Casual users who want to draft text or summarise documents: mainstream consumer models are often enough.
- Visual or audio content creators: the source details no specific improvement for these uses.
What we still don't know
Several gaps remain. The source does not specify the price of the AI Ultra subscription or the exact access conditions. It also does not detail the precise benchmarks, the size of performance gaps, or the model's concrete limits for consumer use. Finally, the initial angle mentioned access through Google Search's AI mode, but the source article does not mention it: better not to take it for granted.
Quick comparison: what Carbon unlocks by profile
| Profile | Access | Main claimed benefit | Caveat |
|---|---|---|---|
| AI Ultra subscriber | Gemini app | Google's most powerful model | Price and conditions unspecified |
| Developer | AI Studio, Android Studio | Agentic coding | Performance not independently verified |
| Security expert | Expanded access | Robustness to prompt injection | One test cited, not a guarantee |
| Scientist / engineer | Via the channels above | Science, maths, simulation | No detailed benchmarks |
| Casual consumer | Gemini app (AI Ultra) | Few specific advantages | The source itself says so |
Takeaways before subscribing
- Carbon is now available beyond the cybersecurity circle, but public evidence remains limited.
- The claimed strengths are mainly code, science and security, not mainstream creation.
- The 0% score on the Gray Swan IPI test is a signal, not a certificate of invulnerability.
- The AI Ultra price and exact conditions are not documented in the source: check them before committing.
- If your use is limited to drafting or summarising, the gap with cheaper offers is not demonstrated.
In short, Gemini 4 Carbon is a meaningful opening for technical profiles, but the price/value trade-off is hard to settle without pricing data or independent evaluations. Caution is warranted around claims of superiority.
Source
Google Expands Gemini 4 Carbon Availability
