by Z.ai · GLM-5 family · best for open-weights long-horizon coding and security agents
GLM-5.3 is Z.ai's flagship open-weights model, released on the Z.ai API on 2026-08-14 with weights following on Hugging Face in late August. It keeps GLM-5.2's 753B-parameter mixture-of-experts base and adds a large round of post-training aimed at long-horizon coding agents, with a jump in vulnerability discovery and exploitation that Z.ai describes as emergent. On Z.ai's own launch table it sits within a point of GPT-5.6 Sol on Terminal-Bench 2.1 and leads its comparison set on CyberGym, AutomationBench and GDPval-AA, at the same $1.40 / $4.40 price as GLM-5.2. The sentence a buyer needs: this is the strongest open-weights coding model Z.ai has shipped, at about a third of Sol's input price and under a quarter of its output price, but every benchmark is vendor-reported, reasoning can no longer be switched off, and the weights now ship under a custom license instead of plain MIT.
thinking.type accepts only enabled, and reasoning_effort takes low, high or max (default max). Requests that still send thinking.type: "disabled" fail, where GLM-5.2 could skip thinking.| Benchmark | Score | Source |
|---|---|---|
| LMArena Elo | 1483 | lmarena.ai 2026-09-13T00:00:00.000Z |
| Terminal-Bench | 88.2% | huggingface.co 2026-08-14T00:00:00.000Z |
| LMArena Coding Elo | 1524 | lmarena.ai 2026-09-13T00:00:00.000Z |
Six personas, six verdicts — the same panel that reviews every product on TopReviewed.
“Near-Sol coding at under a quarter of Sol's output price, with weights you can host, but the license gained a clause and every score is Z.ai's.”
GLM-5.3 keeps GLM-5.2's economics and adds a real step on the workloads that drive token spend: coding agents and long-horizon automation. On Z.ai's table it sits within a point of GPT-5.6 Sol on Terminal-Bench 2.1 and six points behind on DeepSWE, at $1.40 / $4.40 against $4 / $20. Exit costs stay low: the weights are public and Z.ai, Mistral, Alibaba Cloud and six inference providers serve it. The trade-offs are a new license clause requiring Z.ai's security review for model-as-a-service groups above US$10 billion in revenue, no compliance certifications from Z.ai, and reasoning that can no longer be switched off.
“Z.ai is pushing open weights into the closed labs' last strongholds, long-horizon coding and exploit work, and tightening its license as it goes.”
GLM-5.3 lands in a crowded quarter: Kimi K3, Qwen3.8-Max and DeepSeek-V4-Pro-0813 all offer open weights, and Z.ai's own table shows them trading wins on coding. GLM-5.3 stands out on agentic office work (top of its table on AutomationBench and GDPval-AA) and on a security story no other open lab tells as loudly: the best CyberGym score in the comparison and 2,436 vulnerabilities reported in real projects. The new license clause signals that Z.ai wants a say when hyperscale model-as-a-service operators resell its weights. Distribution also widened, with Mistral and Alibaba Cloud serving it alongside the usual inference providers.
“Same $1.40 in and $4.40 out as GLM-5.2 with fewer output tokens per task, though GLM-5.3-Flash at a tenth of the price deserves the first test.”
List prices did not move: $1.40 input, $4.40 output and $0.26 cached input on Z.ai, with cache storage free for now. That is below Kimi K3 ($3 / $15), Qwen3.8-Max ($2 / $6 internationally) and GPT-5.6 Sol ($4 / $20), and close to DeepSeek V4-Pro at peak ($1.32 / $3.96, half that off-peak). Z.ai also reports fewer output tokens per task than GLM-5.2 (about 75K against 96K at max effort), which cuts cost per completed task. Two cautions: reasoning is always on, so every call pays for thinking, and Z.ai lists no batch discount.
“Three API protocols, agent results measured inside Claude Code and full reasoning traces; migrate carefully, because disabling thinking now fails.”
Integration is flexible: Z.ai exposes GLM-5.3 through OpenAI Chat Completions, OpenAI Responses and Anthropic Messages endpoints, and ran most of its benchmarks inside Claude Code 2.1.207, a good sign for agent-harness compatibility. Function calling (up to 128 functions), streamed tool-call arguments via tool_stream, context caching and JSON output (json_object) are documented. Migration has one hard break: thinking.type: "disabled" now errors, so switch to reasoning_effort: "low". Self-hosters should note the chat template keeps earlier reasoning in context by default (clear_thinking false), and Z.ai recommends clear_thinking=true for chat. Screenshots need a second model.
“Excellent for long coding sessions on the GLM Coding Plan, but every answer thinks first and it still cannot read a screenshot or a scanned PDF.”
For a daily user the main route is the GLM Coding Plan, which Z.ai rolled out to all subscribers with GLM-5.3 and which plugs into Claude Code, OpenCode and Z.ai's own ZCode. The plan now uses points, and calls outside weekday peak hours (14:00 to 18:00 UTC+8) cost half the points. GLM-5.3 holds up on long agentic tasks and, per Z.ai, uses fewer tokens than GLM-5.2 to finish them. The friction: reasoning runs on every request, so quick questions wait, and text-only input sends images and PDFs elsewhere. GLM-5.3-Flash gets three times the plan quota and accepts images.
“Every GLM-5.3 number comes from Z.ai, some benchmark checks were changed by Z.ai, and its cheaper Flash sibling beats it on three agent benchmarks.”
Treat the launch table as a vendor claim. Every score comes from Z.ai's model card and blog; only FrontierSWE (run by Proximal) and GDPval-AA (run by Artificial Analysis) were produced by third parties, and both reach buyers through Z.ai. Z.ai replaced some anti-cheat checks in SWE-Marathon and PostTrainBench with LLM-based inspection, and the 50% headline gain is on its private Z.ai Code Bench. On its own table GLM-5.3 still trails GPT-5.6 Sol on Terminal-Bench 3.0, DeepSWE and exploitation, and Claude Opus 4.8 on NL2Repo. GLM-5.3-Flash, at a tenth of the price, beats it on Toolathlon (78.4 vs 73.0), AutomationBench and GDPval-AA in Z.ai's own figures.
thinking.type: "disabled" requests fail.The full research notes behind this review — verified against primary sources.
GLM-5.3 is the GLM-5.2 base model: a 753B-parameter mixture-of-experts (glm_moe_dsa in Transformers) activating about 40B parameters per token, the figure Z.ai published for that base. Z.ai's config.json on Hugging Face shows 78 transformer layers plus one multi-token-prediction layer, the first three layers dense and the rest MoE, 256 routed experts plus one shared expert with 8 routed experts per token, hidden size 6,144, 64 attention heads with low-rank (MLA-style) query and key-value projections, a 1,048,576-position window and a 154,880-token vocabulary. Attention is sparse: a lightweight indexer picks the top 2,048 tokens for each query, and 57 of the 78 layers reuse an indexer computed on an earlier layer (the IndexShare design introduced with GLM-5.2). The main repository ships FP8 (E4M3, 128x128 blocks) weights; zai-org/GLM-5.3-BF16 holds the BF16 checkpoint. Post-training ran on slime, Z.ai's open-source RL framework (Megatron for training, SGLang for rollouts), with SAO and context compaction for long-horizon RL and machine-synthesized task environments whose verifiers are built without the reference solution. Training tokens, compute and knowledge cutoff are undisclosed; the GLM-5 technical report is arXiv 2602.15763.
Scores lean on Z.ai's launch figures, which no independent evaluator had published at verification time, so they are set conservatively.
tool_stream), and the Toolathlon gain of 13 points over GLM-5.2.All scores below are vendor-reported by Z.ai on its model card and launch blog (2026-08-14). Competitor figures are as published in Z.ai's table. Z.ai's table labels one column "Fable 5 (w/ fallback)"; its blog text refers to the same cyber scores as Mythos 5.
| Benchmark | Score | vs Predecessor | vs Top Competitor | Source |
|---|---|---|---|---|
| Terminal-Bench 2.1 (Claude Code harness) | 88.2 | GLM-5.2 81.0 | GPT-5.6 Sol 88.8; Kimi K3 88.3; Claude Fable 5 88.0 | Z.ai model card (vendor-reported) |
| Terminal-Bench 3.0 (avg@3) | 28.3 | 4.6 | GPT-5.6 Sol 34.6; Claude Fable 5 33.7; Kimi K3 17.4 | Z.ai model card (vendor-reported) |
| DeepSWE v1.1 | 66.9 | 46.2 | GPT-5.6 Sol 72.7; Claude Fable 5 69.7; Kimi K3 67.5 | Z.ai model card (vendor-reported) |
| NL2Repo | 58.0 | 48.9 | Claude Opus 4.8 69.7; DeepSeek-V4 Pro-0813 61.1 | Z.ai model card (vendor-reported) |
| ProgramBench (almost solved) | 19.0 | 9.5 | Claude Fable 5 33.0; GPT-5.6 Sol 23.0 | Z.ai model card (vendor-reported) |
| FrontierSWE (run by Proximal) | 78.1 | 67.5 | Claude Fable 5 88.2; Claude Opus 4.8 66.5 | Z.ai model card (vendor-reported) |
| SWE-Marathon v1.1 | 42.5 | 19.4 | Claude Opus 4.8 48.8; Kimi K3 48.1; GPT-5.6 Sol 42.5 | Z.ai model card (vendor-reported) |
| PostTrainBench | 39.8 | 31.7 | Claude Fable 5 41.8; GPT-5.6 Sol 36.2 | Z.ai model card (vendor-reported) |
| CyberGym | 84.5 | 77.2 | Claude Fable 5 83.8; GPT-5.6 Sol 83.6; DeepSeek-V4 Pro-0813 83.3 | Z.ai model card (vendor-reported) |
| ExploitBench | 54.4 | 24.4 | Claude Fable 5 78.0; GPT-5.6 Sol 76.5 | Z.ai model card (vendor-reported) |
| ExploitGym (tasks in 2h / 6h) | 105 / 130 | 29 / 39 | GPT-5.6 Sol 216 / 293; Claude Fable 5 181 / 247 | Z.ai model card (vendor-reported) |
| Toolathlon Verified | 73.0 | 59.9 | Kimi K3 76.5; Claude Opus 4.8 76.2 | Z.ai model card (vendor-reported) |
| AutomationBench v1.0.6 | 48.2 | 26.2 | Kimi K3 46.7; Claude Fable 5 46.2 | Z.ai model card (vendor-reported) |
| Agents' Last Exam (CLI) | 28.5 | 23.8 | GPT-5.6 Sol 28.6; Kimi K3 27.6 | Z.ai model card (vendor-reported) |
| HLE with tools | 62.5 | 54.7 | GPT-5.6 Sol 64.5; Claude Fable 5 63.9; DeepSeek-V4 Pro-0813 60.0 | Z.ai model card (vendor-reported) |
| GDPval-AA v2 (Elo, run by Artificial Analysis) | 1,769 | 1,508 | Claude Fable 5 1,743; Qwen3.8-Max 1,739; GPT-5.6 Sol 1,730 | Z.ai model card (vendor-reported) |
| Z.ai Code Bench (private, max effort) | 34.5% | 23.4% | Claude Fable 5 39.5% at max; Claude Opus 4.8 29.5% vs GLM-5.3 31.4% at high effort | Z.ai blog (vendor-reported) |
Most agentic and coding rows ran in Claude Code 2.1.207 at max effort, with harness details in Z.ai's footnotes. Z.ai replaced some anti-cheat checks in SWE-Marathon and PostTrainBench with LLM-based inspection, and ExploitGym time budgets were rescaled by each model's throughput. Only Terminal-Bench 2.1 maps to a catalog compare field, on the same version as GLM-5.2's stored 81.0. The HLE result is with tools, while GLM-5.2's stored HLE (40.5) is without tools, so that compare field stays empty rather than mixing modes. Z.ai published no GPQA Diamond, AIME, SWE-bench Verified, LiveCodeBench, MMLU-Pro or LMArena figure for GLM-5.3, and no independent leaderboard result for it could be confirmed at verification time.
No independent throughput or time-to-first-token measurement could be confirmed, so both fields are null. The only figure on Z.ai's pages is in its ExploitGym footnote, which rescales time budgets using 115 output tokens per second for GLM-5.3 (40 for Kimi K3, 47 for Qwen3.8-Max), numbers Z.ai attributes to Artificial Analysis. In practice, reasoning runs on every request and defaults to max, so even simple prompts spend time thinking; low is the fastest setting. Z.ai reports fewer output tokens per task than GLM-5.2 (about 75K against 96K at max effort on its coding benchmark), which shortens long agent runs. Measure on the host you plan to use: Z.ai, Mistral, Alibaba Cloud and six inference providers listed on Hugging Face all serve it.
| Surface | Cost | Notes |
|---|---|---|
| API input | $1.40 / 1M tok | Z.ai international platform; same as GLM-5.2 |
| API output | $4.40 / 1M tok | Reasoning always on |
| Cached input | $0.26 / 1M tok | About 81% off input; cache storage free for a limited time |
| Batch (in/out) | n/a | No batch price on Z.ai's pricing pages |
| Mistral (public preview) | $1.40 / $4.40 | $0.14 cached input; served without Mistral modifications |
| Alibaba Cloud Model Studio | $1.131 / $3.957 | Beijing-region list price; $0.283 implicit-cache input |
| Web Search tool | $0.01 / use | Z.ai platform tool, not documented for GLM-5.3 |
| GLM Coding Plan | from $18 / month | Points-based quota; off-peak calls use 50% of the points |
| Free tier | none | Z.ai's free models are GLM-4.7-Flash and GLM-4.5-Flash |
| Self-host | free weights | GLM-5.3 License |
| Rate limits | not published | Not stated on the GLM-5.3 model or pricing pages |
Z.ai's natively multimodal GLM-5.3-Flash costs $0.15 / $0.50, about a tenth of GLM-5.3.
Faster serving (Prime mode). Alibaba Cloud Model Studio also serves this model as glm-5.3-prime (listed 2026-09-23): the same weights and capabilities with a claimed 1.5–2× output speed, at $2.80 input / $8.80 output / $0.56 cached per 1M tokens (Singapore), about twice Z.ai's own list price. Z.ai does not offer Prime itself. Source: Alibaba Cloud Model Studio, Prime mode (help.aliyun.com/en/model-studio/prime-mode); OpenRouter z-ai/glm-5.3-prime.
https://api.z.ai/api/v1) and Anthropic Messages (https://api.z.ai/api/anthropic). The API reference serves chat at https://api.z.ai/api/paas/v4/chat/completions. Accounts that have ever held a GLM Coding Plan, even an expired one, can currently call the API only through the Chat Completions protocol. Zhipu's China platform (bigmodel.cn) has served glm-5.3 since 2026-08-19.zai-org/GLM-5.3 and BF16 at zai-org/GLM-5.3-BF16, with recipes for SGLang, vLLM, TokenSpeed, Transformers, KTransformers and Unsloth, plus Ascend NPU support through vLLM-Ascend, xLLM and SGLang. At one byte per parameter the FP8 weights alone are about 750 GB before KV cache, so this is a multi-GPU server or cluster model.zai-glm-5-3, zai-glm-5 and zai-glm-latest. Alibaba Cloud Model Studio serves glm-5.3 with Alibaba as the inference provider, 1,048,576-token input and 131,072-token output.Z.ai's official SDKs are zai-sdk for Python and Java, and the OpenAI Chat Completions, OpenAI Responses and Anthropic Messages protocols let standard OpenAI and Anthropic clients connect. Z.ai positions GLM-5.3 for coding agents: it is the flagship model on the GLM Coding Plan and in ZCode, Z.ai's own agent app, and Z.ai benchmarks it inside Claude Code; OpenCode is also supported. For self-hosting, SGLang, vLLM, TokenSpeed, Transformers, KTransformers and Unsloth have GLM-5.3 recipes, and Ascend NPUs are supported. Beyond Z.ai, Together AI, Fireworks, DeepInfra, Novita, Baseten, Featherless AI, Mistral and Alibaba Cloud Model Studio serve it. The main Hugging Face repository logged about 1 million downloads in its first month. Popularity is growing, carried by the coding-agent audience GLM-5.2 built.
$1.40 per 1M input tokens, $4.40 per 1M output tokens and $0.26 per 1M cached input tokens on Z.ai, the same as GLM-5.2. Cache storage is free for a limited time and there is no published batch discount. Mistral charges the same $1.40 / $4.40 with $0.14 cached input.
GLM-5.2 used plain MIT. GLM-5.3 uses the GLM-5.3 License: the same MIT-style rights to use, modify, fine-tune, redistribute and sell, plus one condition. If you or any affiliate run a model-as-a-service business (third-party API-style inference or fine-tuning with meaningful control over inputs, parameters or training data) and your group's total revenue exceeds US$10 billion in any consecutive 12 months, you must pass Z.ai's security review before any commercial use. Products that only embed the model in specific features, or that merely relay requests to models hosted by others, do not count as model-as-a-service.
No. thinking.type accepts only enabled, and requests that send disabled fail. Use reasoning_effort: "low" for the lightest thinking; the default is max, which Z.ai recommends for coding.
No, GLM-5.3 is text-only. GLM-5.3-Flash, Z.ai's natively multimodal sibling, accepts images, video and files at $0.15 / $0.50.
For coding and agent workloads, yes: same price, same base model, large vendor-reported gains and fewer output tokens per task. Before switching, replace any thinking.type: "disabled" calls and re-test your JSON and tool flows.
Yes. FP8 and BF16 weights are on Hugging Face with recipes for SGLang, vLLM, TokenSpeed, Transformers, KTransformers and Unsloth, plus Ascend NPU support. The FP8 weights alone are about 750 GB, so plan for a multi-GPU server or a cluster.
Z.ai's API data processing addendum says customer data is generally processed in Singapore and that Z.ai does not store the content customers input or generate. Z.ai lists no SOC 2, ISO 27001 or HIPAA certification.
Hugging Face lists Together AI, Fireworks, DeepInfra, Novita, Baseten and Featherless AI as live providers. Mistral offers it in public preview, Alibaba Cloud Model Studio serves it, and Zhipu's bigmodel.cn platform serves it in China.
Open weights (about 2.8T parameters, Kimi K3 License) with image input and a 1,048,576-token context. On Z.ai's table it ties GLM-5.3 on Terminal-Bench 2.1 (88.3 vs 88.2) and DeepSWE (67.5 vs 66.9) and leads on Toolathlon (76.5 vs 73.0) and SWE-Marathon (48.1 vs 42.5), but trails on Terminal-Bench 3.0 (17.4 vs 28.3), CyberGym and AutomationBench. At $3 / $15 it costs about twice GLM-5.3's input price and 3.4 times its output price.
Alibaba's 2.4T-parameter open-weights flagship with image and video input on the API. At $2 / $6 internationally it costs 43% more for input and 36% more for output. Z.ai's table puts it behind GLM-5.3 on DeepSWE (56.6 vs 66.9), Terminal-Bench 2.1 (86.6 vs 88.2), CyberGym (78.5 vs 84.5) and GDPval-AA (1,739 vs 1,769). Qwen wins on multimodal input and Alibaba Cloud's enterprise footprint.
The current DeepSeek-V4-Pro-0813 checkpoint is MIT-licensed and text-only, with a 1M context and 384K max output, at $1.32 / $3.96 peak and half that off-peak. Z.ai's table has it close on Terminal-Bench 2.1 (87.9 vs 88.2) and ahead on NL2Repo (61.1 vs 58.0), but behind on DeepSWE (62.7 vs 66.9) and GDPval-AA (1,590 vs 1,769). DeepSeek wins on license simplicity, output length and off-peak price; GLM-5.3 wins on agentic results.
The closed reference point: 1.05M context, 128K output, image input, $4 / $20 on promotional pricing through at least 2026-11-21. Sol leads GLM-5.3 on most of Z.ai's coding rows (Terminal-Bench 3.0 34.6 vs 28.3, DeepSWE 72.7 vs 66.9) and far ahead on exploitation (ExploitBench 76.5 vs 54.4). GLM-5.3 edges it on CyberGym, AutomationBench, PostTrainBench and GDPval-AA, at 35% of Sol's input price and 22% of its output price, with open weights.
$2 / $10 with a 1M context, 128K output, image input, a 50% batch discount and availability on Amazon Bedrock, Google Cloud and Microsoft Foundry. Z.ai did not benchmark against Sonnet 5, so there is no shared scoreboard. Sonnet wins on governance, multimodal input and cloud reach; GLM-5.3 costs 30% less on input and 56% less on output and can be self-hosted.
Primary references used to verify this review.
Does not train on API inputs by default
Last verified 2026-09-21