Google’s new Gemini 4 Argon is launching to a narrow audience: trusted cyber defenders in Google DeepMind’s Fairwind Program. Developers, enterprises and consumers have no announced access date, even though Google has published API prices and detailed claims about the model’s capabilities.
Google describes Argon as a major advance in long-horizon software engineering, professional work and vulnerability remediation. It also says it needs more time to test safeguards before opening those capabilities to a wider audience. Early third-party benchmarks offer a check on some of its performance claims, but most prospective users cannot yet see how Argon performs in their own systems.
Fairwind Access Comes Before a Public Launch
Google announced Argon on September 30, 2026, and said it was rolling out to a set of trusted cyber defenders through Fairwind. The company is also using the model internally. Neither arrangement amounts to a general Gemini release or an open developer preview.
Google plans to gather feedback from early testers and work on guardrails before expanding access to developers, enterprises and consumers. It has not given a date for that expansion or published a general sign-up path in the announcement. As The Verge’s launch report notes, the immediate release is limited to trusted cyber defenders.
The restriction is tied to what Argon is designed to do. Google says the model can find, validate and patch software vulnerabilities autonomously. It plans to let trusted defenders and its internal teams use those capabilities without cyber guardrails, while continuing to develop protections against misuse for a broader release. That describes a specific exception for vetted defensive work; it does not mean Argon has no safety measures.
Safeguards still under development or testing include defenses against harmful requests and prompt injection, monitoring of model reasoning and actions for misalignment, and more secure environments for high-risk testing. Google also says it is participating in a voluntary U.S. government process for pre-release model access. The announcement presents these steps as reasons for a phased rollout, without giving a timetable for completing one.
Google’s Coding and Enterprise Claims Need Context
Google is positioning Argon as a model that can sustain work across long, multi-step tasks. Its announcement reports a 77.9% score on DeepSWE v1.1, an evaluation of long-horizon software engineering, and a 51.3% score on Zapier’s AutomationBench, which tests execution across business functions. Google calls the latter a first-place result.
The company describes internal work alongside those scores. It says Argon agents are helping migrate C and C++ code to Rust, including work on large codebases. In one example, Google says agents replaced 32,000 lines of SIMD code in an existing Rust port of its libgav1 video decoder and produced a version that runs 2.7 times faster than that Rust port. This is Google’s reported result on a specific project, with no evidence that Argon will deliver comparable speedups on other codebases.
For enterprise work, Google points to financial research, legal tasks and workflow automation. It claims leading results on the Vals Index and domain-specific evaluations for finance and legal work, alongside the AutomationBench score. Those tests address plausible uses for an AI assistant. They do not establish how much supervision a production workflow would need, how often it would fail on unfamiliar material, or whether the economics would work for a particular customer.
A coding agent might produce a credible patch that still fails review; a research agent might complete most steps correctly and mishandle the one source the decision depends on. Such risks grow when a model takes several actions in sequence. Google’s figures are evidence for the tasks and testing conditions it reports, not a measured success rate for everyday deployments.
Cyber Defense Is Both the Selling Point and the Constraint
Cybersecurity gives this release its unusual shape. Google says Argon can discover and remediate vulnerabilities, and reports that it tied for first at 68% on CWE-bench v1, a vulnerability-remediation evaluation. That Google-reported benchmark result is not a general measure of how well the model secures live systems.
Google says Wiz is already using Argon for defensive work through its Scan for Good initiative. It also describes an instance in which the model identified a critical exposure affecting healthcare software. The announcement does not provide enough independent detail to assess that case or predict Argon’s performance across other organizations.
Capable defenders could use stronger tools to find and fix weaknesses sooner. The same ability to investigate software and validate vulnerabilities raises misuse concerns if access is poorly controlled. Google’s approach is to give vetted defenders early access while it tests protections for everyone else. Its effectiveness will depend on both the model’s defensive value and the safeguards Google eventually puts around broader use.
A Million Output Tokens Is Not a Million-Token Context Window
Google says Argon supports an output limit of up to one million tokens, compared with 64,000 tokens for its previous frontier model. Output is what the model generates. A context window describes the material it can take into account. The two limits answer different questions, even when both happen to be described with the same number.
Artificial Analysis lists a separate one-million-token context window for Argon. That should not be mistaken for Google’s output claim. A large context window could let an application supply extensive documents or conversation history; a large output allowance could let an agent continue generating through a long task. Neither specification guarantees that the model will use the available space accurately or economically.
The output figure also has an implementation detail. In its early testing report, Artificial Analysis says it used a Gemini API feature called Long Decode Continuation, which pauses a long response and resumes it across follow-up calls. The advertised limit should not be read as a promise of a single uninterrupted API response containing one million tokens.
API Prices Are Announced, but Most Buyers Cannot Use Them Yet
Google’s introductory API prices are $2 per million input tokens and $10 per million output tokens. It says cached input receives a 95% discount, making the introductory cached-input rate $0.10 per million tokens. After the introductory period, Google plans to charge $4 per million input tokens and $20 per million output tokens. It has not announced when the promotion will end.
These are prices for a planned broader API offering; developers cannot necessarily start sending requests today. They also leave out an important cost variable: how many tokens an agent consumes while completing a task. A lower per-token rate can be offset if a model generates substantially more tokens to get the same work done.
That distinction is particularly relevant to Argon’s large output allowance. Its headline limit describes capacity, not a typical bill or a recommendation to run million-token jobs.
Independent Tests Show Strengths, Not a Settled Ranking
Artificial Analysis provides an early counterpoint to Google’s own performance claims. At its highest reasoning setting, the testing firm reports that Argon scored , matching GPT-6 Astra at its maximum setting and one point ahead of GPT-6.1 Sol at its maximum setting. These are third-party benchmark results under specified settings, not proof that the models are interchangeable in production.
Frequently Asked Questions
4 questions
1Can developers use Gemini 4 Argon now?
No. Google says Gemini 4 Argon is initially rolling out to trusted cyber defenders through its Fairwind Program, while Google also uses the model internally. It plans to expand access to developers, enterprises and consumers after further safeguard testing, but has not announced a public API release date or a general availability date.
2
Sources
- Gemini 4 Argonblog.google
- The Verge’s launch reporttheverge.com
- Artificial Analysis listsartificialanalysis.ai
- early testing reportartificialanalysis.ai
