Google to restrict free access to Gemini AI models from October 9

Google will restrict access to some of its Gemini artificial intelligence models for users without a paid AI subscription, with the changes taking effect from 9 October.

Under the new model availability structure, users without a Google AI subscription will have access only to Gemini Flash-Lite, instead of the three models previously available, according to Google.

Google AI Plus subscribers will retain access to Flash-Lite and Flash but will no longer have access to the Pro model. Google said AI Plus subscribers will be notified by email when the changes take effect for their accounts.

Subscribers to Google AI Pro and Google AI Ultra will continue to have access to all three models i.e. Flash-Lite, Flash and Pro.

Google said AI Pro and AI Ultra subscribers will also have access to Deep Think, a feature designed to provide greater parallel reasoning for complex tasks.

The changes come as Google continues to expand its paid AI subscription offerings, creating clearer distinctions between free and premium access to its Gemini models.

The changes to consumer access come days after Google restricted public access to its latest AI model, Gemini 4 Argon, citing concerns over the potential misuse of its advanced capabilities.

Unveiled last week, Argon is initially available only to a vetted group of cybersecurity experts and trusted partners through Google’s Fairwind programme. The company has not announced a date for wider public access.

“Safely releasing frontier capabilities at this level requires a phased approach,” Google chief AI architect Koray Kavukcuoglu said in a company blog post announcing the model.

Google is also giving the US government early access to Argon as part of a voluntary process for evaluating advanced AI models before broader release.

Argon is designed to handle complex, extended tasks across software engineering, legal and financial work and cybersecurity. Google has highlighted its ability to identify and fix software vulnerabilities, while early testers reportedly used the model to identify a flaw in hospital software that exposed sensitive personal information.

However, the model’s cybersecurity capabilities have also raised concerns about potential misuse. Google said Argon includes safeguards to refuse requests that could facilitate cyberattacks or the development of chemical, biological or nuclear weapons. The company is also monitoring the model’s reasoning for behaviour that could move beyond a user’s intended instructions.

The controlled rollout reflects a broader shift among AI developers towards more cautious releases of increasingly capable models. Google launched Fairwind in September to provide governments and trusted cybersecurity partners with controlled access to advanced AI capabilities for defensive purposes.

The approach highlights a growing challenge for frontier AI developers: capabilities that can help organisations detect and fix vulnerabilities can also potentially be used to exploit them. Google’s restricted rollout allows the company to gather feedback from trusted users and strengthen safeguards before considering wider access.