
research.google is a toolbox, not a blog
Google Research publishes 400+ papers a year, yet the same page hands out free models, datasets and APIs most developers never open. Here is what you can build.
> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
Frameworks, APIs, open-source, and the modern web stack. — 40 transmissions

Google Research publishes 400+ papers a year, yet the same page hands out free models, datasets and APIs most developers never open. Here is what you can build.

Built by the creators of Apache Sedona, Wherobots sells planetary-scale spatial compute in the cloud. Here is what spatial SQL is and what you can build.

India's Vaani speech corpus has grown to 105 languages and about 31,000 hours on Hugging Face, yet gated access and messy dialect data keep it underused.
At Pwn2Own Ireland, three teams broke into a fully patched Google Pixel 10 over the network on the same day, splitting $562,500 in prizes.

Google is rolling out Gemini 4 Argon to trusted cyber defenders via its Fairwind Program with a planned guardrail-free variant for full defensive capabilities.

A hidden Gemini Desktop toggle points at whole-disk file access. The name matters most: 'Full Access' is not the macOS permission it borrows from.

A 9.9 template-injection flaw in GitLab's self-hosted AI Gateway lets any Duo Agent Platform user escape the prompt sandbox. The fix is three patch versions.

Autonomous agents made 200,000 requests to a US Department of Education site and threw 13 payloads at Library and Archives Canada. Nothing leaked.

Cloudflare plans a public CA with GlobalSign root material and Merkle Tree Certificates from Q1 2027 — post-quantum TLS that still works on old devices.

NVIDIA split agent safety into two layers: OpenShell sandboxes the agent, Sentry watches it from BlueField-4 silicon. The split is the actual idea.

The Netherlands is testing Linux workstations, the EU is buying sovereign cloud, China is pulling a custom Windows 10 early. Replacing Windows is the easy part.

GitLab's "Email work item" address hides an account-wide token. Leak it and anyone can push to main, run CI jobs as you, and skip IP allowlists.