Reading
Argon Ships Without Guardrails to Defenders. Ultra Pays to Wait
Google gave vetted cyber defenders an unrestricted Gemini 4 Argon. AI Ultra subscribers get a filtered version, at some later date. Is that fair?
Prices last read 2026-10-11
Short answer
Paying subscribers are in the queue, but not at the front, and none of them will get the unrestricted version.Google announced Gemini 4 Argon on September 30, 2026. It is rolling out first to vetted cyber defenders in its Fairwind Program, and those defenders, along with Google's internal teams, get it without cyber guardrails. Google says wider access will start with paid API customers and Google AI Ultra subscribers once it has feedback from early testers. It has not given a date. As of today, Google's Gemini plans page does not list Argon under any consumer plan, and the announcement says nothing about the free plan, AI Plus or AI Pro.Source: Gemini 4 Argon: our next era of frontier intelligence (Google) · 2026-10-11; Gemini subscriptions (Google) · 2026-10-11
Who the "hackers" actually are
First, a correction to the framing in our own question: Fairwind is not open to freelance hackers who decided to work defense. Google says it gives priority to governments and national cyber authorities, critical infrastructure operators such as healthcare, telecom, energy and finance, and core technology platforms. Academic labs doing defensive benchmarking can also apply. Applicants go through vetting and background checks. Inside an approved organization, Argon access is limited to internal cybersecurity, incident response or penetration testing teams, and the organization has to track employee access and use. The terms require phishing-resistant MFA and permit only defensive and academic research tasks.
Source: Fairwind Program (Google DeepMind) · 2026-10-11

we do not allow partner organizations to share, redistribute, or sell access to our frontier models.
Google DeepMind, Fairwind Program termsSource: Fairwind Program (Google DeepMind) · 2026-10-11
This rule matters to subscribers because it closes off any shortcut: no partner is allowed to pass Fairwind access on to anyone else. If you aren't a vetted organization, you wait for the general release.

What "without guardrails" means here
In its announcement, Google says it will release Argon "without cyber guardrails" to trusted defenders and its internal teams so they can use the model's full cyber defense capabilities. Google describes the overall release as needing "a phased approach." It says it is taking part in the U.S. government's voluntary process for pre-release model access, and will keep collecting early-tester feedback "as we iterate on guardrails" before the wider release. Digit reports that everyone outside the trusted groups will get a version that rejects harmful cyber and CBRN requests.
Source: Gemini 4 Argon: our next era of frontier intelligence (Google) · 2026-10-11; Gemini 4 Argon: Google is giving defenders a Cyber AI with no guardrails (Digit) · 2026-10-11
Our take: this is a two-tier AI, and Google should say so plainly
I'll give Google the strongest version of its argument first: an AI that can find and patch vulnerabilities by itself is also, with small changes, an AI that can find and exploit them. Giving the unrestricted version to vetted defenders, under MFA and usage tracking, is far more defensible than giving it to everyone at once. Attackers won't wait for a polished consumer launch, so defenders getting it first is reasonable.
What bothers me is everything around that argument. Google now runs two Argons. One goes to a small group chosen by Google, under criteria Google sets. The other is a filtered version that AI Ultra subscribers, who pay Google's top consumer price, will receive at an unannounced date. Digit makes the same point: the post never defines who counts as "trusted" or who decides. That isn't a scandal, but it is a policy decision about who gets the most powerful AI, and right now it's being made in a blog footnote, not through a public debate.
Source: Gemini 4 Argon: Google is giving defenders a Cyber AI with no guardrails (Digit) · 2026-10-11
Overrated: the idea that waiting is a good deal for Ultra subscribers. Underrated: how open-ended "as soon as possible" is. Google's announcement includes Argon's introductory API prices, but its consumer plans page still lists 3.8 Flash and 3.1 Pro as the top models. If you pay for AI Ultra today, you are paying for those models plus a place in line, not for Argon.
Source: Gemini subscriptions (Google) · 2026-10-11; Gemini 4 Argon: our next era of frontier intelligence (Google) · 2026-10-11
What to do now, by plan
- Free, AI Plus or AI Pro: the announced rollout doesn't mention your plan, so don't change your plan expecting Argon.
- AI Ultra: you are in the first wider wave, but there's no date. Judge Ultra on what it includes today.
- Developers: Google lists paid API customers in that same first wave. Watch the Gemini API pricing page rather than relying on reposts of the introductory prices.
- Security teams at eligible organizations: Fairwind has an official request form, and Google states the eligibility criteria and terms on the program page.
Source: Gemini 4 Argon: our next era of frontier intelligence (Google) · 2026-10-11; Fairwind Program (Google DeepMind) · 2026-10-11; Gemini subscriptions (Google) · 2026-10-11
Don't buy Ultra just for Argon
Until Argon appears on Google's own plans page, upgrading only for Argon means paying for a promise. Wait for the listing, then decide.
Optional: compare Gemini subscription listings from a third-party seller. This is a seller listing, not official Google access and not an endorsement.. That link carries our partner code Sk52g, which is how a purchase is attributed to this site. Promotion code UPD3S.
Sources (all read 2026-10-11)
- Gemini 4 Argon: our next era of frontier intelligence (Google, Sep 30, 2026)
- Fairwind Program (Google DeepMind)
- Gemini 4 Argon with cybersecurity defense capabilities (Google DeepMind)
- Gemini subscriptions (Google)
- Google releases Gemini 4 Argon, called its most powerful model yet (TechCrunch, Sep 30, 2026)
- Gemini 4 Argon: Google is giving defenders a Cyber AI with no guardrails (Digit, Oct 1, 2026)