A quiet initiative goes public
Google DeepMind and Isomorphic Labs have pulled back the curtain on a bioresilience program that has been quietly building steam for the past year. The two sister organizations now count more than 15 partnerships with government bodies, biosecurity groups, and academic research teams — all aimed at keeping advanced AI from being weaponized in biology while accelerating outbreak detection and response.
The disclosure comes with a specific tension baked in. Frontier models like Gemini already carry a deep, increasingly detailed understanding of biology. Pair that with specialized biology models, agent platforms like Antigravity, and third-party databases, and the capability only sharpens. The same knowledge that helps a researcher map a vaccine target could, in principle, help a threat actor close gaps in their own understanding. DeepMind and Isomorphic frame this as a dual mandate: push scientific progress while keeping dangerous tools out of the wrong hands.
Three pillars, 15 partners, and a lot of unknowns
The program rests on three pillars: preventing misuse, detecting outbreaks faster, and responding once an outbreak or attack is underway. Over the last year, DeepMind has built partnerships touching all three, though the company has named only a handful of collaborators so far — including Lawrence Livermore National Laboratory, the UK AI Security Institute, CEPI, and the Francis Crick Institute.
Over the next six to twelve months, DeepMind says it plans to widen those relationships, with a focus on threat intelligence, evaluation methods for AI agents, and jailbreak mitigations. It’s also coordinating with the Frontier Model Forum on thornier questions — like how to handle riskier categories of training data, with virology datasets cited as the example.
Locking down Gemini without blocking legitimate science
Prevention work starts with threat modeling. DeepMind says it’s trying to identify which actors are most likely to attempt misuse and what bottlenecks currently stop them. The company uses a mix of expert red-teaming and randomized controlled trials to judge whether Gemini could help someone clear those bottlenecks.
Post-training methods are designed to teach the model to refuse harmful queries while avoiding what DeepMind calls over-refusal of legitimate science questions. It’s a balance that’s proven difficult across the industry, not just for DeepMind. Classifiers and probes flag risky activity in real time, and targeted log analysis catches subtler misuse patterns that automated filters might miss.
None of these mitigations is described as solved. DeepMind frames them as an ongoing process rather than a finished system — a distinction that matters for any enterprise or government body evaluating whether to rely on the safeguards as currently configured. A classifier tuned against known jailbreak patterns in a controlled evaluation doesn’t guarantee equivalent performance against novel attack methods surfacing in live use. The company doesn’t claim otherwise.
The DNA synthesis screening problem
One of the more concrete risks involves DNA synthesis. Companies within the International Gene Synthesis Consortium currently screen orders against lists of known harmful pathogens and toxins, paired with screening algorithms. DeepMind states plainly that this approach is starting to fray. AI can now help design DNA sequences with similar function to a dangerous pathogen without matching its sequence closely enough to trigger existing screens.
The proposed fix borrows from DeepMind’s existing watermarking system, SynthID, which the company says has become an industry standard for marking AI-generated images and text. Adapting it to biological sequences is presented as exploratory work, not a shipped product.
A longer-term goal — described as an open technical challenge rather than something close to resolved — involves screening that predicts whether a novel DNA sequence is likely toxic or pathogenic based on its function, regardless of whether it resembles anything in existing databases.
Cheaper sequencing as the detection layer
Detection depends on metagenomic sequencing, which characterizes every microorganism in a sample rather than checking for a shortlist of known pathogens the way traditional diagnostics do. The limiting factor is cost. Scaling the approach to the regions where outbreaks are most likely to originate requires that cost to fall considerably.
DeepMind points to a collaboration between Google and Pacific Biosciences that used its AlphaEvolve coding agent to improve sequencing accuracy as one data point toward that goal. The company says it’s now looking at further opportunities — from optimizing the algorithms that process sequencing data, through to informing hardware design — and separately exploring whether AlphaGenome could help characterize pathogens directly from sequence data.
These remain research collaborations rather than field-deployed systems. The distance between a sequencing accuracy gain in a controlled pipeline and a functioning early-warning network across wastewater and transit hubs in low-resource settings is not small.
AlphaFold’s publication record and the countermeasure gap
The response pillar leans on the medical countermeasure gap that leaves many known pathogens without a licensed diagnostic, vaccine, or treatment. DeepMind cites more than 10,000 publications on infectious disease that have referenced AlphaFold over five years, covering work on tuberculosis and malaria transmission and target mapping for threats including Mpox and Nipah.
The newest addition to that record is a partnership with Lawrence Livermore’s bioresilience program, which plans to use AlphaFold 3 for broad-spectrum antibody design work, including a pan-filovirus antibody effort. DeepMind says it will keep adding protein structures and complexes to the AlphaFold Protein Structure Database this year, prioritizing targets relevant to countermeasure development.
Access to newer agent systems, including Co-Scientist, is being extended to selected researchers — among them scientists in the US Department of Energy’s National Laboratories working under the Genesis Mission.
Isomorphic Labs has gone a step further, setting up a dedicated unit intended to deploy its drug design engine quickly during a novel outbreak, working alongside government and national research bodies such as Lawrence Livermore, the UK AI Security Institute, CEPI, and the Francis Crick Institute. The company also pledged $7 million to Health for Human Potential, a Philanthropy Asia Alliance programme, for infectious disease research across Asia.
Policy wishlist meets legislative reality
DeepMind’s recommendations to US policymakers map directly onto its three pillars and lean on specific pending legislation:
- Prevention: It backs a federal frontier AI safety framework, the AI-Ready Bio-Data Standards Act (H.R. 7907), mandatory DNA synthesis screening through the Biosecurity Modernization and Innovation Act (S. 3741), and the SCALE Biology Act (H.R. 8981).
- Detection: It wants metagenomic sequencing expanded across transit hubs and dense population centres, supported by the America’s Living Library Act (S. 4023) and additional DARPA and HHS funding for early-warning research.
- Response: It calls for the Web of Biological Data Act (H.R. 9307 / S. 4770) and investment in manufacturing capacity kept “warm-based” and ready for rapid activation, alongside pre-established clinical trial networks and faster regulatory pathways.
None of that legislation is enacted. The gap between a company’s policy wishlist and a functioning federal biosecurity framework is where the real test of this program will play out over the next 6-12 months.
For more on how AI is reshaping health diagnostics, see our coverage of Neko Health’s $700 million raise for AI body scans. And for a deeper look at the broader landscape, check out AI & Big Data Expo taking place in Amsterdam, California, and London.
CyberSecurity4 months ago
CyberSecurity4 months ago
How To3 months ago
Social Media4 months ago
CyberSecurity4 months ago
Infosecurity4 months ago
CyberSecurity4 months ago
CyberSecurity4 months ago