AI Policy Wiki
Dashboard
⚲

Gemini 2.5 Pro Model Card (Google DeepMind, updated June 2025)

medium confidence · updated 2026-09-19

Google DeepMind's model card for Gemini 2.5 Pro in the version updated June 27, 2025, covering the general-availability model alongside the Preview (05-06) and Experimental (03-25) versions. Reports a benchmark table against OpenAI, Anthropic, xAI and DeepSeek models, automated safety deltas against Gemini 1.5 Pro 002, and a Frontier Safety Framework assessment with per-version cybersecurity results.

The Gemini 2.5 Pro model card is a document published by Google DeepMind for Gemini 2.5 Pro; the version summarised here is marked "Model card updated June 27, 2025" (Source: https://storage.googleapis.com/deepmind-media/Model-Cards/Gemini-2-5-Pro-Model-Card.pdf). The card states that it was updated to cover Gemini 2.5 Pro GA in addition to Gemini 2.5 Pro Experimental (03-25) and Gemini 2.5 Pro Preview (05-06), and to reflect the model's move to general availability. It directs readers who want more detail to the Gemini 2.5 technical report. Because it reports the three versions side by side, the card records how results moved between the March, May and June 2025 releases.

Model information

The card describes Gemini 2.5 Pro as a natively multimodal reasoning ("thinking") model that accepts text, images, audio and video with a 1M-token context window and produces text with a 64K-token output. The Gemini 2.5 models are described as sparse mixture-of-experts transformers; parameter counts are not given. Training data is described as publicly available web documents, code, images, audio and video, with post-training on vetted instruction-tuning, human-preference and tool-use data; filtering included deduplication, safety filtering and quality filtering. Training used Google's Tensor Processing Units with JAX and ML Pathways. The knowledge cutoff is January 2025. Known limitations listed are hallucinations and limits in causal understanding, complex logical deduction and counterfactual reasoning; the main safety limitations named are over-refusals and tone.

Capability evaluation

The results table, labelled "as of June 2025", has columns for Gemini 2.5 Pro GA, Preview (05-06) and Experimental (03-25), and for OpenAI o3 and o4-mini at high reasoning, Claude Sonnet 4, Claude Opus 4 with 32K thinking, Grok 3 Beta with extended thinking, and DeepSeek R1 05-28. It covers Humanity's Last Exam, GPQA diamond, AIME 2025, LiveCodeBench (two leaderboard date windows), Aider Polyglot, SWE-bench Verified (single and multiple attempts), SimpleQA, FACTS Grounding, MMMU, Vibe-Eval, VideoMME, VideoMMMU, MRCR and MRCR v2 (8-needle), and Global MMLU (Lite). The card states that "the most recent model shows significant improvement in code performance" while other capabilities are similar across the three versions.

The approach section states that all Gemini results are pass@1 through the AI Studio API with default sampling, names the three model IDs used, and defines "single attempt" as allowing no majority voting or parallel test-time compute. It specifies which thinking settings were used for each comparison model, says that where a provider reported two numbers the higher used majority voting with n=64 (Grok) or parallel test-time compute (Anthropic), and states that SWE-bench Verified figures follow each provider's own scaffolding. For MRCR, the card says it changed methodology to a harder 8-needle version for the newest column, so the earlier versions' MRCR figures are not comparable with the GA figure.

Content safety

Automated safety evaluations are reported as absolute percentage changes relative to Gemini 1.5 Pro 002 for each of the three versions: text-to-text safety, multilingual safety, image-to-text safety, tone, and instruction following. The card also describes baseline assurance evaluations, human and automated red teaming, and mitigations including dataset filtering, supervised fine-tuning, reinforcement learning from human and critic feedback, and product-level safety filtering. No absolute violation rates are given.

Frontier safety

The card summarises evaluation against the critical capability levels (CCLs) of Google's Frontier Safety Framework, with separate columns for the three versions, and reports no CCL reached. For cybersecurity it gives key-skills benchmark solve counts for all three versions and autonomous-offense-suite counts for the Experimental version, and states that Gemini 2.5 Pro GA "does not show meaningful improvement" over the two earlier versions on the key-skills benchmark. For machine learning R&D it gives an average normalised RE-Bench score of 0.73 for the Experimental version and, for GA, best runs scoring between 50% and 125% of the best human-written solutions, below an alert threshold that the card says was set above human performance. Deceptive-alignment results (2 of 5 stealth and 2 of 11 situational-awareness challenges) are for the Experimental version; the card says those evaluations had not been completed on GA. CBRN results are qualitative, with multiple-choice benchmark scores shown only as a chart.

Differences from the technical report

Several figures in the card differ from those in the later technical report for what both call Gemini 2.5 Pro. The card gives 69.0% on LiveCodeBench (1/1/2025–5/1/2025 window) where the report gives 74.2%; key-skills counts of 7/8 easy, 10/28 medium and 1/12 hard for GA where the report, describing versions "up to 06-05", gives 7/8, 14/28 and 6/12; and a "Disabled Tool" success rate of 46% where the report gives 42%. Neither document explains the differences.

Reported results

Evaluation results the document states for which there is no separate benchmark page; results on benchmarks that have a page are recorded there and cite this page. Scores and settings are as printed in the document.

EvaluationModelScoreSettingSection
FACTS GroundingGemini 2.5 Pro (GA)87.8%pass@1, AI Studio API model-id gemini-2.5-pro-preview-06-05, default sampling; developer-reportedEvaluation – Results (June 2025 table)
FACTS GroundingOpenAI o3 (high)69.6%reported by Google DeepMind in the Gemini 2.5 Pro model card; provider's self-reported number unless the card says otherwiseEvaluation – Results (June 2025 table)
FACTS GroundingOpenAI o4-mini (high)62.1%reported by Google DeepMind in the Gemini 2.5 Pro model card; provider's self-reported number unless the card says otherwiseEvaluation – Results (June 2025 table)
FACTS GroundingClaude Sonnet 479.1%reported by Google DeepMind in the Gemini 2.5 Pro model card; provider's self-reported number unless the card says otherwiseEvaluation – Results (June 2025 table)
FACTS GroundingClaude Opus 4 (32K thinking)77.7%reported by Google DeepMind in the Gemini 2.5 Pro model card; provider's self-reported number unless the card says otherwiseEvaluation – Results (June 2025 table)
FACTS GroundingGrok 3 Beta (Extended Thinking)74.8%reported by Google DeepMind in the Gemini 2.5 Pro model card; provider's self-reported number unless the card says otherwiseEvaluation – Results (June 2025 table)
FACTS GroundingDeepSeek R1 05-2882.4%reported by Google DeepMind in the Gemini 2.5 Pro model card; provider's self-reported number unless the card says otherwiseEvaluation – Results (June 2025 table)
Vibe-Eval (Reka)Gemini 2.5 Pro (GA)67.2%Gemini used as judge; pass@1, AI Studio API model-id gemini-2.5-pro-preview-06-05, default sampling; developer-reportedEvaluation – Results (June 2025 table)
Vibe-Eval (Reka)Gemini 2.5 Pro Preview (05-06)65.6%Gemini used as judge; pass@1, AI Studio API model-id gemini-2.5-pro-preview-05-06, default sampling; developer-reportedEvaluation – Results (June 2025 table)
Vibe-Eval (Reka)Gemini 2.5 Pro Experimental (03-25)69.4%Gemini used as judge; pass@1, AI Studio API model-id gemini-2.5-pro-exp-03-25, default sampling; developer-reportedEvaluation – Results (June 2025 table)
VideoMMMUGemini 2.5 Pro (GA)83.6%pass@1, AI Studio API model-id gemini-2.5-pro-preview-06-05, default sampling; developer-reportedEvaluation – Results (June 2025 table)
Global MMLU (Lite)Gemini 2.5 Pro (GA)89.2%pass@1, AI Studio API model-id gemini-2.5-pro-preview-06-05, default sampling; developer-reportedEvaluation – Results (June 2025 table)
Global MMLU (Lite)Gemini 2.5 Pro Preview (05-06)88.6%pass@1, AI Studio API model-id gemini-2.5-pro-preview-05-06, default sampling; developer-reportedEvaluation – Results (June 2025 table)
Global MMLU (Lite)Gemini 2.5 Pro Experimental (03-25)89.8%pass@1, AI Studio API model-id gemini-2.5-pro-exp-03-25, default sampling; developer-reportedEvaluation – Results (June 2025 table)
Text to Text Safety — Delta vs. Gemini 1.5 Pro 002Gemini 2.5 Pro (GA)-0.9%absolute percentage change vs. Gemini 1.5 Pro 002 on Google's internal automated evaluation (not human evaluation or red teaming); developer-reportedEthics and Safety – Training and Development Evaluation Results
Text to Text Safety — Delta vs. Gemini 1.5 Pro 002Gemini 2.5 Pro Preview (05-06)-8.6%absolute percentage change vs. Gemini 1.5 Pro 002 on Google's internal automated evaluation (not human evaluation or red teaming); developer-reportedEthics and Safety – Training and Development Evaluation Results
Text to Text Safety — Delta vs. Gemini 1.5 Pro 002Gemini 2.5 Pro Experimental (03-25)-7.0%absolute percentage change vs. Gemini 1.5 Pro 002 on Google's internal automated evaluation (not human evaluation or red teaming); developer-reportedEthics and Safety – Training and Development Evaluation Results
Multilingual Safety — Delta vs. Gemini 1.5 Pro 002Gemini 2.5 Pro (GA)-3.5%absolute percentage change vs. Gemini 1.5 Pro 002 on Google's internal automated evaluation (not human evaluation or red teaming); developer-reportedEthics and Safety – Training and Development Evaluation Results
Multilingual Safety — Delta vs. Gemini 1.5 Pro 002Gemini 2.5 Pro Preview (05-06)-1.87%absolute percentage change vs. Gemini 1.5 Pro 002 on Google's internal automated evaluation (not human evaluation or red teaming); developer-reportedEthics and Safety – Training and Development Evaluation Results
Multilingual Safety — Delta vs. Gemini 1.5 Pro 002Gemini 2.5 Pro Experimental (03-25)-2.14%absolute percentage change vs. Gemini 1.5 Pro 002 on Google's internal automated evaluation (not human evaluation or red teaming); developer-reportedEthics and Safety – Training and Development Evaluation Results
Image to Text Safety — Delta vs. Gemini 1.5 Pro 002Gemini 2.5 Pro (GA)+1.8%absolute percentage change vs. Gemini 1.5 Pro 002 on Google's internal automated evaluation (not human evaluation or red teaming); card marks this '(non egregious)'; developer-reportedEthics and Safety – Training and Development Evaluation Results
Image to Text Safety — Delta vs. Gemini 1.5 Pro 002Gemini 2.5 Pro Preview (05-06)-2.8%absolute percentage change vs. Gemini 1.5 Pro 002 on Google's internal automated evaluation (not human evaluation or red teaming); developer-reportedEthics and Safety – Training and Development Evaluation Results
Image to Text Safety — Delta vs. Gemini 1.5 Pro 002Gemini 2.5 Pro Experimental (03-25)-0.8%absolute percentage change vs. Gemini 1.5 Pro 002 on Google's internal automated evaluation (not human evaluation or red teaming); developer-reportedEthics and Safety – Training and Development Evaluation Results
Tone — Delta vs. Gemini 1.5 Pro 002Gemini 2.5 Pro (GA)+18.4%absolute percentage change vs. Gemini 1.5 Pro 002 on Google's internal automated evaluation (not human evaluation or red teaming); developer-reportedEthics and Safety – Training and Development Evaluation Results
Tone — Delta vs. Gemini 1.5 Pro 002Gemini 2.5 Pro Preview (05-06)+7.9%absolute percentage change vs. Gemini 1.5 Pro 002 on Google's internal automated evaluation (not human evaluation or red teaming); developer-reportedEthics and Safety – Training and Development Evaluation Results
Tone — Delta vs. Gemini 1.5 Pro 002Gemini 2.5 Pro Experimental (03-25)+5.7%absolute percentage change vs. Gemini 1.5 Pro 002 on Google's internal automated evaluation (not human evaluation or red teaming); developer-reportedEthics and Safety – Training and Development Evaluation Results
Instruction Following — Delta vs. Gemini 1.5 Pro 002Gemini 2.5 Pro (GA)+14.8%absolute percentage change vs. Gemini 1.5 Pro 002 on Google's internal automated evaluation (not human evaluation or red teaming); developer-reportedEthics and Safety – Training and Development Evaluation Results
Instruction Following — Delta vs. Gemini 1.5 Pro 002Gemini 2.5 Pro Preview (05-06)+10.9%absolute percentage change vs. Gemini 1.5 Pro 002 on Google's internal automated evaluation (not human evaluation or red teaming); developer-reportedEthics and Safety – Training and Development Evaluation Results
Instruction Following — Delta vs. Gemini 1.5 Pro 002Gemini 2.5 Pro Experimental (03-25)+4.3%absolute percentage change vs. Gemini 1.5 Pro 002 on Google's internal automated evaluation (not human evaluation or red teaming); developer-reportedEthics and Safety – Training and Development Evaluation Results
Cybersecurity key skills benchmark — EasyGemini 2.5 Pro (GA)7/8challenges solved; solved if at least one attempt captures the flag; Cyber Uplift Level 1 CCL not reached; developer-reportedFrontier Safety (Table 1; Cybersecurity)
Cybersecurity key skills benchmark — MediumGemini 2.5 Pro (GA)10/28challenges solved; solved if at least one attempt captures the flag; Cyber Uplift Level 1 CCL not reached; developer-reportedFrontier Safety (Table 1; Cybersecurity)
Cybersecurity key skills benchmark — HardGemini 2.5 Pro (GA)1/12challenges solved; solved if at least one attempt captures the flag; Cyber Uplift Level 1 CCL not reached; developer-reportedFrontier Safety (Table 1; Cybersecurity)
Cybersecurity key skills benchmark — EasyGemini 2.5 Pro Preview (05-06)5/8challenges solved; solved if at least one attempt captures the flag; Cyber Uplift Level 1 CCL not reached; developer-reportedFrontier Safety (Table 1; Cybersecurity)
Cybersecurity key skills benchmark — MediumGemini 2.5 Pro Preview (05-06)13/28challenges solved; solved if at least one attempt captures the flag; Cyber Uplift Level 1 CCL not reached; developer-reportedFrontier Safety (Table 1; Cybersecurity)
Cybersecurity key skills benchmark — HardGemini 2.5 Pro Preview (05-06)4/12challenges solved; solved if at least one attempt captures the flag; Cyber Uplift Level 1 CCL not reached; developer-reportedFrontier Safety (Table 1; Cybersecurity)
Cybersecurity key skills benchmark — EasyGemini 2.5 Pro Experimental (03-25)6/8challenges solved; solved if at least one attempt captures the flag; Cyber Uplift Level 1 CCL not reached; developer-reportedFrontier Safety (Table 1; Cybersecurity)
Cybersecurity key skills benchmark — MediumGemini 2.5 Pro Experimental (03-25)11/28challenges solved; solved if at least one attempt captures the flag; Cyber Uplift Level 1 CCL not reached; developer-reportedFrontier Safety (Table 1; Cybersecurity)
Cybersecurity key skills benchmark — HardGemini 2.5 Pro Experimental (03-25)4/12challenges solved; solved if at least one attempt captures the flag; Cyber Uplift Level 1 CCL not reached; developer-reportedFrontier Safety (Table 1; Cybersecurity)
Autonomous cyber offense suite — Easy (InterCode-CTF)Gemini 2.5 Pro Experimental (03-25)75/76challenges solved; InterCode-CTF denominator reduced from 81 to 76 by removing challenges needing internet access; Cyber Autonomy Level 1 CCL not reached; developer-reportedFrontier Safety (Table 1; Cybersecurity)
Autonomous cyber offense suite — Medium (in-house CTFs)Gemini 2.5 Pro Experimental (03-25)10/13challenges solved; InterCode-CTF denominator reduced from 81 to 76 by removing challenges needing internet access; Cyber Autonomy Level 1 CCL not reached; developer-reportedFrontier Safety (Table 1; Cybersecurity)
Autonomous cyber offense suite — Hard (Hack the Box)Gemini 2.5 Pro Experimental (03-25)1/13challenges solved; InterCode-CTF denominator reduced from 81 to 76 by removing challenges needing internet access; Cyber Autonomy Level 1 CCL not reached; developer-reportedFrontier Safety (Table 1; Cybersecurity)
Stealth challenges (Phuong et al. 2025)Gemini 2.5 Pro Experimental (03-25)2/5challenges solved by the agent; results updated to the published versions of the evaluations; developer-reportedFrontier Safety (Table 1; Deceptive Alignment)
Situational awareness challenges (Phuong et al. 2025)Gemini 2.5 Pro Experimental (03-25)2/11challenges solved by the agent; developer-reportedFrontier Safety (Table 1; Deceptive Alignment)
Situational awareness challenges (Phuong et al. 2025) — Disabled ToolGemini 2.5 Pro Preview46%success rate across 50 trials; highest of the 11 evaluations; no successes on 8 of 11; card text names the model 'Gemini 2.5 Pro Preview' while an update note attributes the results to Experimental (03-25); developer-reportedFrontier Safety – Deceptive Alignment
Stealth challenges (Phuong et al. 2025) — Decision SabotageGemini 2.5 Pro Preview~45%success rate; developer-reportedFrontier Safety – Deceptive Alignment
Stealth challenges (Phuong et al. 2025) — Oversight PatternGemini 2.5 Pro Preview~35%success rate; card says this 'is similar to human performance'; developer-reportedFrontier Safety – Deceptive Alignment

Provenance

The page summarises the PDF's text layer as captured on September 19, 2026. Figures 1 to 4 are charts whose values are not given in the text. All results are reported by Google DeepMind; comparison figures are mostly the other developers' own numbers or public leaderboards. Confidence is medium.

Relationships