GLM-5.3

GALatest Flagship

by Z.ai · GLM-5 family · best for open-weights long-horizon coding and security agents

FrontierReasoningCodingOpen-WeightsLong-Context
8.7
AI Panel Score
Value 9.6/10

GLM-5.3 is Z.ai's flagship open-weights model, released on the Z.ai API on 2026-08-14 with weights following on Hugging Face in late August. It keeps GLM-5.2's 753B-parameter mixture-of-experts base and adds a large round of post-training aimed at long-horizon coding agents, with a jump in vulnerability discovery and exploitation that Z.ai describes as emergent. On Z.ai's own launch table it sits within a point of GPT-5.6 Sol on Terminal-Bench 2.1 and leads its comparison set on CyberGym, AutomationBench and GDPval-AA, at the same $1.40 / $4.40 price as GLM-5.2. The sentence a buyer needs: this is the strongest open-weights coding model Z.ai has shipped, at about a third of Sol's input price and under a quarter of its output price, but every benchmark is vendor-reported, reasoning can no longer be switched off, and the weights now ship under a custom license instead of plain MIT.

What's new

  • Same base model, more post-training. Z.ai says every gain over GLM-5.2 comes from post-training. The Hugging Face parameter count is identical (753.3B), and the GLM-5.2 repository now points to GLM-5.3 as its new version.
  • Coding (vendor-reported): a 50% gain over GLM-5.2 on Z.ai's private Z.ai Code Bench; Terminal-Bench 2.1 88.2 vs 81.0; Terminal-Bench 3.0 28.3 vs 4.6; DeepSWE v1.1 66.9 vs 46.2; FrontierSWE 78.1 vs 67.5; SWE-Marathon v1.1 42.5 vs 19.4.
  • Fewer output tokens per task: at max effort Z.ai reports 34.5% on Z.ai Code Bench at about 75K output tokens per task, against 23.4% at 96K for GLM-5.2.
  • Cyber (vendor-reported): CyberGym 84.5 vs 77.2, ExploitBench 54.4 vs 24.4, ExploitGym 105 / 130 tasks at 2h / 6h vs 29 / 39. Working with security teams in China, Z.ai reports 2,436 vulnerabilities found across 269 real projects, tracked in a public Security Disclosure Ledger.
  • Agentic (vendor-reported): Toolathlon Verified 73.0 vs 59.9; AutomationBench v1.0.6 48.2 vs 26.2; GDPval-AA v2 1,769 vs 1,508 Elo; HLE with tools 62.5 vs 54.7.
  • Reasoning is always on. thinking.type accepts only enabled, and reasoning_effort takes low, high or max (default max). Requests that still send thinking.type: "disabled" fail, where GLM-5.2 could skip thinking.
  • License changed from plain MIT (GLM-5.2) to the custom GLM-5.3 License, described under Deployment Options.
  • Weights after the API: Z.ai launched the API first and said it would release weights about two weeks later, "once safety evaluation and hardening are complete".
  • Price unchanged: $1.40 / $4.40, $0.26 cached input, cache storage free for a limited time.

Benchmarks

BenchmarkScoreSource
LMArena Elo1483lmarena.ai 2026-09-13T00:00:00.000Z
Terminal-Bench88.2%huggingface.co 2026-08-14T00:00:00.000Z
LMArena Coding Elo1524lmarena.ai 2026-09-13T00:00:00.000Z

AI Panel Review

Six personas, six verdicts — the same panel that reviews every product on TopReviewed.

Decision Maker8.5/10
“Near-Sol coding at under a quarter of Sol's output price, with weights you can host, but the license gained a clause and every score is Z.ai's.”

GLM-5.3 keeps GLM-5.2's economics and adds a real step on the workloads that drive token spend: coding agents and long-horizon automation. On Z.ai's table it sits within a point of GPT-5.6 Sol on Terminal-Bench 2.1 and six points behind on DeepSWE, at $1.40 / $4.40 against $4 / $20. Exit costs stay low: the weights are public and Z.ai, Mistral, Alibaba Cloud and six inference providers serve it. The trade-offs are a new license clause requiring Z.ai's security review for model-as-a-service groups above US$10 billion in revenue, no compliance certifications from Z.ai, and reasoning that can no longer be switched off.

Strategic Fit 9Vendor Risk 7.5Roadmap Confidence 8.5
Pros
  • Frontier-adjacent coding at a fraction of closed-model prices
  • open weights and many hosts limit lock-in
  • price unchanged from GLM-5.2
Cons
  • Vendor-only benchmarks
  • no compliance certifications from Z.ai
  • custom license replaces MIT
Right for: Platform teams that can own model governance and want a second coding-agent backend
Avoid if: You need a vendor-signed compliance package or independently audited scores before committing
Domain Strategist9/10
“Z.ai is pushing open weights into the closed labs' last strongholds, long-horizon coding and exploit work, and tightening its license as it goes.”

GLM-5.3 lands in a crowded quarter: Kimi K3, Qwen3.8-Max and DeepSeek-V4-Pro-0813 all offer open weights, and Z.ai's own table shows them trading wins on coding. GLM-5.3 stands out on agentic office work (top of its table on AutomationBench and GDPval-AA) and on a security story no other open lab tells as loudly: the best CyberGym score in the comparison and 2,436 vulnerabilities reported in real projects. The new license clause signals that Z.ai wants a say when hyperscale model-as-a-service operators resell its weights. Distribution also widened, with Mistral and Alibaba Cloud serving it alongside the usual inference providers.

Competitive Positioning 9Differentiation 8.5Market Timing 9
Pros
  • Leads its comparison set on agentic office benchmarks
  • distinctive security capability
  • hosting now includes an EU vendor
Cons
  • Crowded open-weights field with near-identical coding scores
  • text-only while Kimi K3 and Qwen3.8-Max accept images
Right for: Products that compete on cost per agent task in coding, automation or security tooling
Avoid if: Your roadmap depends on multimodal input from the same model
Finance Lead9.5/10
“Same $1.40 in and $4.40 out as GLM-5.2 with fewer output tokens per task, though GLM-5.3-Flash at a tenth of the price deserves the first test.”

List prices did not move: $1.40 input, $4.40 output and $0.26 cached input on Z.ai, with cache storage free for now. That is below Kimi K3 ($3 / $15), Qwen3.8-Max ($2 / $6 internationally) and GPT-5.6 Sol ($4 / $20), and close to DeepSeek V4-Pro at peak ($1.32 / $3.96, half that off-peak). Z.ai also reports fewer output tokens per task than GLM-5.2 (about 75K against 96K at max effort), which cuts cost per completed task. Two cautions: reasoning is always on, so every call pays for thinking, and Z.ai lists no batch discount.

Cost Efficiency 9.5Pricing Transparency 9Value per Dollar 9.5
Pros
  • Frontier-adjacent coding at mid-market prices
  • 81% cache discount
  • free weights for self-hosting at scale
Cons
  • No batch tier
  • always-on reasoning adds tokens to simple calls
  • the cheaper Flash sibling may cover many workloads
Right for: Budget owners running high-volume coding or automation agents
Avoid if: Your workloads are simple enough for GLM-5.3-Flash or a non-reasoning model
Domain Practitioner9/10
“Three API protocols, agent results measured inside Claude Code and full reasoning traces; migrate carefully, because disabling thinking now fails.”

Integration is flexible: Z.ai exposes GLM-5.3 through OpenAI Chat Completions, OpenAI Responses and Anthropic Messages endpoints, and ran most of its benchmarks inside Claude Code 2.1.207, a good sign for agent-harness compatibility. Function calling (up to 128 functions), streamed tool-call arguments via tool_stream, context caching and JSON output (json_object) are documented. Migration has one hard break: thinking.type: "disabled" now errors, so switch to reasoning_effort: "low". Self-hosters should note the chat template keeps earlier reasoning in context by default (clear_thinking false), and Z.ai recommends clear_thinking=true for chat. Screenshots need a second model.

API Ergonomics 8.5Tool/Agent Support 9.5Reliability 8.5
Pros
  • OpenAI- and Anthropic-compatible endpoints
  • streamed tool calls
  • strong vendor-reported agent results
Cons
  • Reasoning cannot be disabled
  • JSON mode without schema enforcement
  • no image input
Right for: Teams wiring a cheaper backend into Claude Code, OpenCode or their own agent loop
Avoid if: You rely on fast non-reasoning calls or strict JSON-schema outputs
Power User8.5/10
“Excellent for long coding sessions on the GLM Coding Plan, but every answer thinks first and it still cannot read a screenshot or a scanned PDF.”

For a daily user the main route is the GLM Coding Plan, which Z.ai rolled out to all subscribers with GLM-5.3 and which plugs into Claude Code, OpenCode and Z.ai's own ZCode. The plan now uses points, and calls outside weekday peak hours (14:00 to 18:00 UTC+8) cost half the points. GLM-5.3 holds up on long agentic tasks and, per Z.ai, uses fewer tokens than GLM-5.2 to finish them. The friction: reasoning runs on every request, so quick questions wait, and text-only input sends images and PDFs elsewhere. GLM-5.3-Flash gets three times the plan quota and accepts images.

Output Quality 9Speed 7.5Everyday Usefulness 8.5
Pros
  • Strong long-session coding
  • works inside popular coding agents
  • off-peak quota discount
Cons
  • Always-on reasoning latency
  • text-only input
  • burns plan quota three times faster than GLM-5.3-Flash
Right for: Developers who live in a terminal coding agent
Avoid if: You mostly ask quick questions or paste screenshots
Skeptic7.5/10
“Every GLM-5.3 number comes from Z.ai, some benchmark checks were changed by Z.ai, and its cheaper Flash sibling beats it on three agent benchmarks.”

Treat the launch table as a vendor claim. Every score comes from Z.ai's model card and blog; only FrontierSWE (run by Proximal) and GDPval-AA (run by Artificial Analysis) were produced by third parties, and both reach buyers through Z.ai. Z.ai replaced some anti-cheat checks in SWE-Marathon and PostTrainBench with LLM-based inspection, and the 50% headline gain is on its private Z.ai Code Bench. On its own table GLM-5.3 still trails GPT-5.6 Sol on Terminal-Bench 3.0, DeepSWE and exploitation, and Claude Opus 4.8 on NL2Repo. GLM-5.3-Flash, at a tenth of the price, beats it on Toolathlon (78.4 vs 73.0), AutomationBench and GDPval-AA in Z.ai's own figures.

Claim Accuracy 7Weakness Severity 7.5Hype vs Reality 7.5
Pros
  • Detailed harness footnotes
  • open weights allow direct replication
  • candid about where it trails the closed frontier
Cons
  • Vendor-only results
  • modified anti-cheat checks
  • private headline benchmark
Right for: Buyers who will replicate results on their own repositories
Avoid if: You make vendor decisions from launch-day charts

Strengths

  • Vendor-reported coding within a point of GPT-5.6 Sol on Terminal-Bench 2.1 (88.2 vs 88.8), at $1.40 / $4.40 against Sol's $4 / $20.
  • Leads Z.ai's comparison set on CyberGym (84.5), AutomationBench (48.2) and GDPval-AA v2 (1,769 Elo).
  • Same price as GLM-5.2 with fewer output tokens per task.
  • Open FP8 and BF16 weights with broad serving support, six live Hugging Face inference providers, Mistral and Alibaba Cloud.
  • OpenAI Chat Completions, OpenAI Responses and Anthropic Messages endpoints; benchmarked inside Claude Code.
  • Clear API data terms: processing in Singapore, no storage of customer content.

Limitations

  • Every benchmark is vendor-reported; no independent result could be confirmed at verification time.
  • Text-only input, while Kimi K3, Qwen3.8-Max, GPT-5.6 Sol and Claude Sonnet 5 accept images.
  • Reasoning cannot be disabled, so simple calls still pay for thinking; thinking.type: "disabled" requests fail.
  • Custom license replaces MIT, with a security review for the largest model-as-a-service groups.
  • No batch pricing, no published rate limits, no compliance certifications.
  • Trails GPT-5.6 Sol and Claude Fable 5 on Terminal-Bench 3.0, DeepSWE, ProgramBench and exploitation, even on Z.ai's table.
  • Strong offensive-security capability in an open-weights model raises misuse risk that self-hosters must manage.
  • Knowledge cutoff undisclosed.

Best use cases

  • Long-horizon coding agents. Terminal and repository-scale work in Claude Code, OpenCode or ZCode where cost per completed task matters; Z.ai's numbers put it near GPT-5.6 Sol at a fraction of the price.
  • Authorized security research. Vulnerability discovery and triage on your own codebases, where Z.ai reports the best CyberGym score in its comparison set. Keep humans in the loop and check your legal position.
  • Business-process automation. Multi-step office and SaaS automation, where AutomationBench and GDPval-AA are its strongest vendor-reported results.
  • Self-hosted or sovereign deployments. Organizations that need frontier-adjacent coding on their own hardware, including Ascend NPUs, and fall well below the license's US$10 billion model-as-a-service threshold.
  • Daily driver on the GLM Coding Plan. Developers who want a flat monthly plan for a strong coding agent.

Deep dive

The full research notes behind this review — verified against primary sources.

Architecture

GLM-5.3 is the GLM-5.2 base model: a 753B-parameter mixture-of-experts (glm_moe_dsa in Transformers) activating about 40B parameters per token, the figure Z.ai published for that base. Z.ai's config.json on Hugging Face shows 78 transformer layers plus one multi-token-prediction layer, the first three layers dense and the rest MoE, 256 routed experts plus one shared expert with 8 routed experts per token, hidden size 6,144, 64 attention heads with low-rank (MLA-style) query and key-value projections, a 1,048,576-position window and a 154,880-token vocabulary. Attention is sparse: a lightweight indexer picks the top 2,048 tokens for each query, and 57 of the 78 layers reuse an indexer computed on an earlier layer (the IndexShare design introduced with GLM-5.2). The main repository ships FP8 (E4M3, 128x128 blocks) weights; zai-org/GLM-5.3-BF16 holds the BF16 checkpoint. Post-training ran on slime, Z.ai's open-source RL framework (Megatron for training, SGLang for rollouts), with SAO and context compaction for long-horizon RL and machine-synthesized task environments whose verifiers are built without the reference solution. Training tokens, compute and knowledge cutoff are undisclosed; the GLM-5 technical report is arXiv 2602.15763.

Capabilities

Scores lean on Z.ai's launch figures, which no independent evaluator had published at verification time, so they are set conservatively.

  • Coding (9.4): Terminal-Bench 2.1 88.2 (GPT-5.6 Sol 88.8, Kimi K3 88.3), DeepSWE v1.1 66.9 (Sol 72.7), FrontierSWE 78.1 (Claude Fable 5 88.2, Claude Opus 4.8 66.5), NL2Repo 58.0 (Opus 4.8 69.7). Level with the best open-weights peers and a few points behind Sol and Fable 5 on the hardest rows, on Z.ai's own table.
  • Reasoning (9.3): HLE with tools 62.5 against Sol's 64.5 and Fable 5's 63.9. No GPQA, AIME or MMLU-Pro figure was published for GLM-5.3.
  • Math (9.5): No math benchmark published for GLM-5.3. Held at GLM-5.2's level because the base model is the same.
  • Agentic / tool use (9.4): Top of Z.ai's comparison set on AutomationBench (48.2) and GDPval-AA v2 (1,769 Elo, run by Artificial Analysis), level with Sol on Agents' Last Exam (28.5 vs 28.6), behind Kimi K3 (76.5) and Opus 4.8 (76.2) on Toolathlon Verified (73.0).
  • Long context (9.0): 1M-token window on sparse attention built for that length. Z.ai ran several evaluations at 1M context, but published no dedicated long-context benchmark.
  • Multilingual (8.5): English and Chinese are the tagged languages; no multilingual benchmark published.
  • Vision / document OCR (0 / 0): Text-only. Z.ai's chat template tells the model it cannot process images, video or audio.
  • Creative writing (7.5): No data; Z.ai's tuning targets engineering work. Held at GLM-5.2's level.
  • Instruction following (8.8): No IFEval figure. Held at GLM-5.2's level.
  • Function calling (9.2): Up to 128 functions per request, streamed tool-call arguments (tool_stream), and the Toolathlon gain of 13 points over GLM-5.2.
  • Safety calibration (7.0): Z.ai reports strong exploit-development capability in an open-weights model, delayed the weights for safety evaluation and hardening, and published no results from that work. Self-hosters own every safeguard.
  • Real-time data (0): No built-in retrieval is listed on the GLM-5.3 model page. Z.ai sells a Web Search tool at $0.01 per use, but does not document it for this model.

Benchmark analysis

All scores below are vendor-reported by Z.ai on its model card and launch blog (2026-08-14). Competitor figures are as published in Z.ai's table. Z.ai's table labels one column "Fable 5 (w/ fallback)"; its blog text refers to the same cyber scores as Mythos 5.

Benchmark Score vs Predecessor vs Top Competitor Source
Terminal-Bench 2.1 (Claude Code harness) 88.2 GLM-5.2 81.0 GPT-5.6 Sol 88.8; Kimi K3 88.3; Claude Fable 5 88.0 Z.ai model card (vendor-reported)
Terminal-Bench 3.0 (avg@3) 28.3 4.6 GPT-5.6 Sol 34.6; Claude Fable 5 33.7; Kimi K3 17.4 Z.ai model card (vendor-reported)
DeepSWE v1.1 66.9 46.2 GPT-5.6 Sol 72.7; Claude Fable 5 69.7; Kimi K3 67.5 Z.ai model card (vendor-reported)
NL2Repo 58.0 48.9 Claude Opus 4.8 69.7; DeepSeek-V4 Pro-0813 61.1 Z.ai model card (vendor-reported)
ProgramBench (almost solved) 19.0 9.5 Claude Fable 5 33.0; GPT-5.6 Sol 23.0 Z.ai model card (vendor-reported)
FrontierSWE (run by Proximal) 78.1 67.5 Claude Fable 5 88.2; Claude Opus 4.8 66.5 Z.ai model card (vendor-reported)
SWE-Marathon v1.1 42.5 19.4 Claude Opus 4.8 48.8; Kimi K3 48.1; GPT-5.6 Sol 42.5 Z.ai model card (vendor-reported)
PostTrainBench 39.8 31.7 Claude Fable 5 41.8; GPT-5.6 Sol 36.2 Z.ai model card (vendor-reported)
CyberGym 84.5 77.2 Claude Fable 5 83.8; GPT-5.6 Sol 83.6; DeepSeek-V4 Pro-0813 83.3 Z.ai model card (vendor-reported)
ExploitBench 54.4 24.4 Claude Fable 5 78.0; GPT-5.6 Sol 76.5 Z.ai model card (vendor-reported)
ExploitGym (tasks in 2h / 6h) 105 / 130 29 / 39 GPT-5.6 Sol 216 / 293; Claude Fable 5 181 / 247 Z.ai model card (vendor-reported)
Toolathlon Verified 73.0 59.9 Kimi K3 76.5; Claude Opus 4.8 76.2 Z.ai model card (vendor-reported)
AutomationBench v1.0.6 48.2 26.2 Kimi K3 46.7; Claude Fable 5 46.2 Z.ai model card (vendor-reported)
Agents' Last Exam (CLI) 28.5 23.8 GPT-5.6 Sol 28.6; Kimi K3 27.6 Z.ai model card (vendor-reported)
HLE with tools 62.5 54.7 GPT-5.6 Sol 64.5; Claude Fable 5 63.9; DeepSeek-V4 Pro-0813 60.0 Z.ai model card (vendor-reported)
GDPval-AA v2 (Elo, run by Artificial Analysis) 1,769 1,508 Claude Fable 5 1,743; Qwen3.8-Max 1,739; GPT-5.6 Sol 1,730 Z.ai model card (vendor-reported)
Z.ai Code Bench (private, max effort) 34.5% 23.4% Claude Fable 5 39.5% at max; Claude Opus 4.8 29.5% vs GLM-5.3 31.4% at high effort Z.ai blog (vendor-reported)

Most agentic and coding rows ran in Claude Code 2.1.207 at max effort, with harness details in Z.ai's footnotes. Z.ai replaced some anti-cheat checks in SWE-Marathon and PostTrainBench with LLM-based inspection, and ExploitGym time budgets were rescaled by each model's throughput. Only Terminal-Bench 2.1 maps to a catalog compare field, on the same version as GLM-5.2's stored 81.0. The HLE result is with tools, while GLM-5.2's stored HLE (40.5) is without tools, so that compare field stays empty rather than mixing modes. Z.ai published no GPQA Diamond, AIME, SWE-bench Verified, LiveCodeBench, MMLU-Pro or LMArena figure for GLM-5.3, and no independent leaderboard result for it could be confirmed at verification time.

Speed & latency

No independent throughput or time-to-first-token measurement could be confirmed, so both fields are null. The only figure on Z.ai's pages is in its ExploitGym footnote, which rescales time budgets using 115 output tokens per second for GLM-5.3 (40 for Kimi K3, 47 for Qwen3.8-Max), numbers Z.ai attributes to Artificial Analysis. In practice, reasoning runs on every request and defaults to max, so even simple prompts spend time thinking; low is the fastest setting. Z.ai reports fewer output tokens per task than GLM-5.2 (about 75K against 96K at max effort on its coding benchmark), which shortens long agent runs. Measure on the host you plan to use: Z.ai, Mistral, Alibaba Cloud and six inference providers listed on Hugging Face all serve it.

Pricing analysis

Surface Cost Notes
API input $1.40 / 1M tok Z.ai international platform; same as GLM-5.2
API output $4.40 / 1M tok Reasoning always on
Cached input $0.26 / 1M tok About 81% off input; cache storage free for a limited time
Batch (in/out) n/a No batch price on Z.ai's pricing pages
Mistral (public preview) $1.40 / $4.40 $0.14 cached input; served without Mistral modifications
Alibaba Cloud Model Studio $1.131 / $3.957 Beijing-region list price; $0.283 implicit-cache input
Web Search tool $0.01 / use Z.ai platform tool, not documented for GLM-5.3
GLM Coding Plan from $18 / month Points-based quota; off-peak calls use 50% of the points
Free tier none Z.ai's free models are GLM-4.7-Flash and GLM-4.5-Flash
Self-host free weights GLM-5.3 License
Rate limits not published Not stated on the GLM-5.3 model or pricing pages

Z.ai's natively multimodal GLM-5.3-Flash costs $0.15 / $0.50, about a tenth of GLM-5.3.

Faster serving (Prime mode). Alibaba Cloud Model Studio also serves this model as glm-5.3-prime (listed 2026-09-23): the same weights and capabilities with a claimed 1.5–2× output speed, at $2.80 input / $8.80 output / $0.56 cached per 1M tokens (Singapore), about twice Z.ai's own list price. Z.ai does not offer Prime itself. Source: Alibaba Cloud Model Studio, Prime mode (help.aliyun.com/en/model-studio/prime-mode); OpenRouter z-ai/glm-5.3-prime.

Deployment & access

  • Z.ai API: Z.ai's model page lists three protocols: OpenAI Chat Completions, OpenAI Responses (https://api.z.ai/api/v1) and Anthropic Messages (https://api.z.ai/api/anthropic). The API reference serves chat at https://api.z.ai/api/paas/v4/chat/completions. Accounts that have ever held a GLM Coding Plan, even an expired one, can currently call the API only through the Chat Completions protocol. Zhipu's China platform (bigmodel.cn) has served glm-5.3 since 2026-08-19.
  • Open weights: FP8 weights at zai-org/GLM-5.3 and BF16 at zai-org/GLM-5.3-BF16, with recipes for SGLang, vLLM, TokenSpeed, Transformers, KTransformers and Unsloth, plus Ascend NPU support through vLLM-Ascend, xLLM and SGLang. At one byte per parameter the FP8 weights alone are about 750 GB before KV cache, so this is a multi-GPU server or cluster model.
  • License: The GLM-5.3 License grants MIT-style rights to use, copy, modify, merge, publish, distribute, sublicense and sell the software, and to run, deploy and fine-tune it and build derivatives, on two conditions: keep the copyright and permission notice, and comply with applicable law. The added clause defines "Model as a Service" as giving a third party access to language-model inference or fine-tuning (for example through an API) with meaningful control over the inputs, parameters or training data. End-user products that embed the model only within specific features or harnesses, and services that merely relay requests to models hosted by others, do not count. If the licensee or any affiliate operates a Model as a Service business and the licensee and its affiliates together have more than US$10 billion in total revenue over any consecutive 12 months, the licensee must pass Z.ai's security review before using GLM-5.3 or its derivatives for any commercial purpose, with the review's scope and method set by Z.ai. The trigger is group revenue, not model-as-a-service revenue, and once triggered the review covers all commercial use. For nearly every buyer the terms behave like MIT; hyperscale clouds and the largest platforms need Z.ai's sign-off. Questions go to glmlicense@z.ai.
  • Managed hosts: Hugging Face lists Together AI, Fireworks, DeepInfra, Novita, Baseten and Featherless AI as live inference providers. Mistral lists GLM 5.3 as a third-party model on its API pricing page, and its public docs mark it public preview (released on Mistral 2026-09-15) with a 1M context, 128K output, function calling, structured outputs and batching, under the API names zai-glm-5-3, zai-glm-5 and zai-glm-latest. Alibaba Cloud Model Studio serves glm-5.3 with Alibaba as the inference provider, 1,048,576-token input and 131,072-token output.
  • Data residency: Z.ai's API data processing addendum says customer data is generally processed in Singapore.

Safety & privacy

  • Framework: Z.ai publishes no named safety framework, capability tiers or refusal metrics for GLM-5.3.
  • Dual-use cyber capability: Z.ai's own figures put GLM-5.3 at the top of CyberGym and more than double GLM-5.2 on exploitation benchmarks, while still well behind the closed frontier on ExploitBench and ExploitGym. Z.ai delayed the weights for safety evaluation and hardening but published no results. It runs a Security Disclosure Ledger; at launch it counted 2,436 findings, 53 publicly disclosed and 2,383 under embargo.
  • License gate: The GLM-5.3 License requires a Z.ai security review before the largest model-as-a-service groups use it commercially. There are no use-based restrictions for anyone else.
  • API data handling: Z.ai's API is operated by Jingsheng Hengxing Technology Pte. Ltd. in Singapore. Its data processing addendum says Z.ai acts as a data processor on the customer's instructions, does not store the content customers input or generate (it is processed in real time), and generally processes customer data in Singapore.
  • Compliance: No SOC 2, ISO 27001, HIPAA or GDPR certification is stated.
  • Self-hosting: Moderation, refusal behavior and logging are entirely the deployer's responsibility.

Ecosystem & tooling

Z.ai's official SDKs are zai-sdk for Python and Java, and the OpenAI Chat Completions, OpenAI Responses and Anthropic Messages protocols let standard OpenAI and Anthropic clients connect. Z.ai positions GLM-5.3 for coding agents: it is the flagship model on the GLM Coding Plan and in ZCode, Z.ai's own agent app, and Z.ai benchmarks it inside Claude Code; OpenCode is also supported. For self-hosting, SGLang, vLLM, TokenSpeed, Transformers, KTransformers and Unsloth have GLM-5.3 recipes, and Ascend NPUs are supported. Beyond Z.ai, Together AI, Fireworks, DeepInfra, Novita, Baseten, Featherless AI, Mistral and Alibaba Cloud Model Studio serve it. The main Hugging Face repository logged about 1 million downloads in its first month. Popularity is growing, carried by the coding-agent audience GLM-5.2 built.

Buyer questions

How much does GLM-5.3 cost?

$1.40 per 1M input tokens, $4.40 per 1M output tokens and $0.26 per 1M cached input tokens on Z.ai, the same as GLM-5.2. Cache storage is free for a limited time and there is no published batch discount. Mistral charges the same $1.40 / $4.40 with $0.14 cached input.

What exactly changed in the license?

GLM-5.2 used plain MIT. GLM-5.3 uses the GLM-5.3 License: the same MIT-style rights to use, modify, fine-tune, redistribute and sell, plus one condition. If you or any affiliate run a model-as-a-service business (third-party API-style inference or fine-tuning with meaningful control over inputs, parameters or training data) and your group's total revenue exceeds US$10 billion in any consecutive 12 months, you must pass Z.ai's security review before any commercial use. Products that only embed the model in specific features, or that merely relay requests to models hosted by others, do not count as model-as-a-service.

Can I turn off reasoning?

No. thinking.type accepts only enabled, and requests that send disabled fail. Use reasoning_effort: "low" for the lightest thinking; the default is max, which Z.ai recommends for coding.

Does it accept images or PDFs?

No, GLM-5.3 is text-only. GLM-5.3-Flash, Z.ai's natively multimodal sibling, accepts images, video and files at $0.15 / $0.50.

Should I move from GLM-5.2?

For coding and agent workloads, yes: same price, same base model, large vendor-reported gains and fewer output tokens per task. Before switching, replace any thinking.type: "disabled" calls and re-test your JSON and tool flows.

Can I self-host it?

Yes. FP8 and BF16 weights are on Hugging Face with recipes for SGLang, vLLM, TokenSpeed, Transformers, KTransformers and Unsloth, plus Ascend NPU support. The FP8 weights alone are about 750 GB, so plan for a multi-GPU server or a cluster.

Where is my data processed on Z.ai's API?

Z.ai's API data processing addendum says customer data is generally processed in Singapore and that Z.ai does not store the content customers input or generate. Z.ai lists no SOC 2, ISO 27001 or HIPAA certification.

Who else hosts GLM-5.3?

Hugging Face lists Together AI, Fireworks, DeepInfra, Novita, Baseten and Featherless AI as live providers. Mistral offers it in public preview, Alibaba Cloud Model Studio serves it, and Zhipu's bigmodel.cn platform serves it in China.

Comparable models

Kimi K3 — Moonshot

Open weights (about 2.8T parameters, Kimi K3 License) with image input and a 1,048,576-token context. On Z.ai's table it ties GLM-5.3 on Terminal-Bench 2.1 (88.3 vs 88.2) and DeepSWE (67.5 vs 66.9) and leads on Toolathlon (76.5 vs 73.0) and SWE-Marathon (48.1 vs 42.5), but trails on Terminal-Bench 3.0 (17.4 vs 28.3), CyberGym and AutomationBench. At $3 / $15 it costs about twice GLM-5.3's input price and 3.4 times its output price.

Qwen3.8-Max — Alibaba

Alibaba's 2.4T-parameter open-weights flagship with image and video input on the API. At $2 / $6 internationally it costs 43% more for input and 36% more for output. Z.ai's table puts it behind GLM-5.3 on DeepSWE (56.6 vs 66.9), Terminal-Bench 2.1 (86.6 vs 88.2), CyberGym (78.5 vs 84.5) and GDPval-AA (1,739 vs 1,769). Qwen wins on multimodal input and Alibaba Cloud's enterprise footprint.

DeepSeek V4-Pro — DeepSeek

The current DeepSeek-V4-Pro-0813 checkpoint is MIT-licensed and text-only, with a 1M context and 384K max output, at $1.32 / $3.96 peak and half that off-peak. Z.ai's table has it close on Terminal-Bench 2.1 (87.9 vs 88.2) and ahead on NL2Repo (61.1 vs 58.0), but behind on DeepSWE (62.7 vs 66.9) and GDPval-AA (1,590 vs 1,769). DeepSeek wins on license simplicity, output length and off-peak price; GLM-5.3 wins on agentic results.

GPT-5.6 Sol — OpenAI

The closed reference point: 1.05M context, 128K output, image input, $4 / $20 on promotional pricing through at least 2026-11-21. Sol leads GLM-5.3 on most of Z.ai's coding rows (Terminal-Bench 3.0 34.6 vs 28.3, DeepSWE 72.7 vs 66.9) and far ahead on exploitation (ExploitBench 76.5 vs 54.4). GLM-5.3 edges it on CyberGym, AutomationBench, PostTrainBench and GDPval-AA, at 35% of Sol's input price and 22% of its output price, with open weights.

Claude Sonnet 5 — Anthropic

$2 / $10 with a 1M context, 128K output, image input, a 50% batch discount and availability on Amazon Bedrock, Google Cloud and Microsoft Foundry. Z.ai did not benchmark against Sonnet 5, so there is no shared scoreboard. Sonnet wins on governance, multimodal input and cloud reach; GLM-5.3 costs 30% less on input and 56% less on output and can be self-hosted.

Sources

Primary references used to verify this review.

Model specs

Input price
$1.40 / Mtok
Output price
$4.40 / Mtok
Cached input
$0.26 / Mtok
Batch (in/out)
—
Context window
1M tokens
Max output
131K tokens
Knowledge cutoff
Undisclosed
Released
2026-08-14
Modalities
text → text
Output speed
Not profiled
License
Open weights (custom-GLM-5.3-License)
Clouds
Mistral AI, Alibaba Cloud Model Studio

Does not train on API inputs by default

Other GLM-5 versions

Last verified 2026-09-21