On August 14, 2026, Zhipu (Z.ai, Hong Kong-listed stock 02513) released GLM-5.3. It did not change the architecture or add parameters (743B, the same base as GLM-5.2); almost all capability gains came from post-training scaling—using longer-horizon task environments, a broader range of environment types, and longer reinforcement-learning runs to push the ceiling. At the time of release, Zhipu's ARR had reached $1 billion, making it the first Chinese large-model vendor to cross that milestone.
743B parameters, with the same base as GLM-5.2; the architecture is unchanged, and all gains come from post-training.
DeepSWE v1.1: 66.9 (the open-source leader); Terminal-Bench 3.0: 4.6→28.3; SWE-Marathon: 19.4→42.5.
CyberGym: 84.5%, the highest score among all evaluated models (ahead of Mythos 5 at 83.8% and GPT-5.6 Sol at 83.6%).
Its cybersecurity capabilities are so strong that they actually "delayed" the release: the weights and API were postponed by about two weeks for security hardening, and sensitive capabilities were classified as "trusted access."
Trained on the open-source Slime framework, with end-to-end RL throughput 2.3 times higher than existing approaches, making "longer-horizon, larger-scale RL post-training" economically viable.
Effort Level mechanism: four reasoning-depth tiers (Non-Thinking plus Low/High/Max Thinking). Note: when this article was written (8/15), the official documentation said that 5.3 supported Non-Thinking, but the API enforced thinking; this differed from the later official position (Low/High/Max only)—follow the latest official documentation.
Because the base model is unchanged, the deployment toolchain, quantization solutions, and inference infrastructure from the 5.2 era can be migrated smoothly.
| Benchmark | GLM-5.2 | GLM-5.3 |
|---|---|---|
| Terminal-Bench 3.0 | 4.6 | 28.3 |
| DeepSWE v1.1 | 46.2 | 66.9 (open-source leader) |
| Agents' Last Exam (CLI) | 23.8 | 28.5 |
| SWE-Marathon | 19.4 | 42.5 |
| FrontierSWE | 67.5 | 78.1 |
| AutomationBench | — | 48.2 |
| GDPVal-AA v2 (Elo) | — | 1769 |
| Toolathlon Verified | — | 73.0 |
| HLE with Tools | — | 62.5–68.7 |
| Z.ai Code Bench (@ Max) | 23.4% | 34.5% |
Terminal-Bench 3.0: 28.3 vs. Fable 5 (33.7) / GPT-5.6 Sol (34.6), trailing by about 5–6 points.
DeepSWE v1.1: 66.9 vs. Fable 5 (69.7), trailing by fewer than 3 points—the gap has narrowed from a "generational gap" to "single digits." A year ago, open-source models often trailed closed-source models by more than 20 points.
Token efficiency: At about 50,000 tokens per task, Z.ai Code Bench scored 31.4%, exceeding Opus 4.8's 29.5% at about 120,000 tokens—doing better with less than half the tokens; it still trails Fable 5 (39.5% @ Max).
Pricing: The official claim is that API pricing is about one-tenth of the per-token price of leading US models (the 5.2 pricing was about $1.4/$4.4 per million tokens, versus Fable 5's $10/$50, or roughly 1/7–1/11).
CyberGym: 84.5%, the highest overall; ExploitBench: 54.4% (5.2 managed only 24.4%, so the score more than doubled); ExploitGym: 105 tasks in two hours.
The official disclosure: 2,436 vulnerabilities identified across 269 open-source projects, including 1,097 high-severity or critical vulnerabilities; the earliest vulnerability can be traced to 1981, and the average "discovery lag" was 26.6 years.
The cost: the weights and API were delayed by about two weeks (expected at the end of August); sensitive cybersecurity capabilities were classified as "trusted access" and made available only to users approved through the review process; ordinary API users were forced to enable thinking and could choose only Low/High/Max.
As of 8/15: neither the API nor downloadable weights was live; the only currently available channels were a GLM Coding Plan subscription, ZCode, and AutoClaw (fully available from the day of release).
Integration works exactly the same as with GLM-5.2 and other OpenAI-compatible models—point base_url to the relay service's OpenAI-compatible endpoint.
Note: the security classification means that "being able to get the API to run" ≠ "having access to all cybersecurity capabilities"; because thinking is mandatory, cost estimates cannot be based on the lower price of the non-thinking tier.
One-sentence assessment: number one among open-source models, but not number one overall; the gap with the closed-source first tier has shrunk from a "generational gap" to "a few points," but parity has not yet been achieved.
Clear positioning: it is not trying to claim the title of "strongest"; it is competing for "strongest open-source model + best value" (open-source leader + pricing at about one-tenth of closed-source models + a token-efficiency advantage).
GLM-5.3
