Key Terms
- Credits (points) system - the GLM Coding Plan's quota unit since July 30, 2026. Model usage = (input tokens x input multiplier + cached tokens x cached multiplier + output tokens x output multiplier) / 10,000. Every plan has a 5-hour limit and a weekly limit. Source: Zhipu AI – Overview
- Credit multipliers - GLM-5.3 consumes 6.9 credits per 10K input tokens, 1.7 per 10K cached tokens, and 24 per 10K output tokens; GLM-5.3-Flash consumes 2.3/0.56/8, exactly one-third of GLM-5.3's rate, which is the "3x quota" marketing claim. MCP tool calls cost 1.2 credits each. Source: Zhipu AI – Overview
- Peak / off-peak - peak is Monday to Friday 14:00-18:00 UTC+8; everything else, including all weekend, is off-peak and billed at 50% of standard credits. Source: Zhipu AI – Overview
- Night unlimited event - September 3 to October 7, 2026, 23:00-09:00 UTC+8: GLM-5.3-Flash costs zero credits in ZCode and AutoClaw and doubles quota in other supported agents. Originally scheduled to end Sep 20, extended to Oct 7. Source: Zhipu AI – Event Glm 5.3 Flash
- OX Alpha - the anonymous model name Zhipu used to test GLM-5.3-Flash on OpenCode and OpenRouter before release, where it became the most popular model of the week. Resolves August's open watch-item. Source: Zhipu AI – Glm 5.3 Flash
- Thinking always on - GLM-5.3 and GLM-5.3-Flash no longer accept
thinking.type: "disabled"; requests carrying it fail. Reasoning effort islow,high, ormax(defaultmax). Source: Zhipu AI – Glm 5.3 - Hybrid sparse + linear attention - GLM-5.3-Flash's architecture: linear attention handles local dependencies, a lightweight sparse-attention indexer retrieves global context, and IndexPool compresses four indexer key vectors into one. Cuts attention compute 3.0x and KV cache 4.4x versus GLM-5.3. Source: Zhipu AI – Glm 5.3 Flash
- Abliteration - a refusal-removal technique that reconfigures open weights to strip refusals. Anthropic used it on GLM-5.3 in about 2,200 GPU hours (~$4,400), dropping refusal rates from above 90% to 2-12% with capability largely intact. Source: Anthropic – Glm 5 3 And The Spread Of Advanced Cyber Capabilities
- Team Plan Key - a dedicated API key, separate from normal platform keys, that Team Plan members must use to draw on team quota. Source: Zhipu AI – Teamplan
- GLM in Excel (Beta) - spreadsheet extension bundled with Coding Plan tiers. Source: Bigmodel – Overview
Latest Changes
Changes since the 2026-08 report.
- Verified (August watch-item): "OX Alpha" was GLM-5.3-Flash. Zhipu's launch blog states it tested the model anonymously as
ox-alphaon OpenCode and OpenRouter pre-release, where it became "the most popular model of the week," with all traffic served on Chinese AI chips. Source: Zhipu AI – Glm 5.3 Flash - New model: GLM-5.3-FlashX at $0.37/$0.075/$1.25 per MTok (input/cached/output), delivering 200 tokens/s inference; visible on the pricing page and model docs by mid-September (first HN mention Sep 18) and not yet available on the Coding Plan. Source: Zhipu AI – Pricing
- Open weights: GLM-5.3 weights went public August 28 (753B params, custom "glm-5.3" license, 1,413,372 downloads in the last month), with GLM-5.3-Flash weights also public; 70 community quantizations and 8 fine-tunes already exist for GLM-5.3. Sources: Hugging Face – Glm 5.3 , Hugging Face – Glm 5.3 Flash
- Government scrutiny: NIST CAISI (Sep 17) assessed GLM-5.3 as "the most cyber-capable open-weight model released to date," lagging the US frontier by about four months on its cyber capability index (ExploitBench 61.1% vs 100% US frontier best). Source: Nist – Caisis Assessment Zais Glm 53 Cyber Capabilities
- Competitor scrutiny: Anthropic (Sep 29) published research showing GLM-5.3 builds working end-to-end exploits at near-Mythos Preview rates (50/410 vs 56/410 on ExploitBench V8) and its safeguards can be bypassed 64% (false cover story), 92% (prefilled thinking), and 100% (abliterated) of the time. Source: Anthropic – Glm 5 3 And The Spread Of Advanced Cyber Capabilities
- Promotions: night unlimited event launched Sep 3 (23:00-09:00 GLM-5.3-Flash free in ZCode/AutoClaw, 2x quota elsewhere) and was extended from Sep 20 to Oct 7; a "double holiday" promo makes all usage off-peak rated from Sep 25 to Oct 7. Source: Zhipu AI – Event Glm 5.3 Flash
- Pricing (live): individual plan list prices are Lite $18 / Pro $80 / Max $168 per month, currently discounted 30% to $12.6/$56/$117.6 (August recorded $16.2 Lite / $144 Max, a smaller discount); quarterly billing is 20% off, annual 30% off. Source: Zhipu AI – Subscribe
- Ecosystem: GLM-5.3 landed on Mistral's platform (docs.mistral.ai model page live by Sep 16), adding a Western-hosted serving option beyond the third-party inference providers. Source: Mistral AI – Zai Glm 5 3
- Model redirects: GLM-4.7 and GLM-5-Turbo calls now auto-switch to GLM-5.3-Flash on the Coding Plan (GLM-5.2/5.1 still redirect to GLM-5.3), dropping GLM-4.7 from the plan lineup that June listed. Source: Zhipu AI – Overview
- Security disclosure program: Zhipu formalized the Z.ai Security Disclosure Ledger for the 2,436 vulnerabilities (1,097 medium-to-high severity, across 269 projects, oldest ~40 years) its models found with Chinese security teams. Source: Zhipu AI – Glm 5.3
Plans
GLM Coding Plan (Individual)
| Plan | Price (monthly) | Price (annual) | Usage limits | Key inclusions |
|---|---|---|---|---|
| Lite | $18 list, $12.6 with current 30% promo | 30% off (tab label) | 2,000 credits / 5h; 10,000 credits / week; GLM-5.3 ~48-97M tokens/wk, Flash ~146-292M at 95% cache hit | GLM-5.3 + GLM-5.3-Flash, 20+ agent tools, default data privacy, small-repo use |
| Pro | $80 list, $56 promo | 30% off | 12,000 credits / 5h; 60,000 credits / week (6x Lite) | Priority model access, curated MCP tools, faster generation, mid-size repos |
| Max | $168 list, $117.6 promo | 30% off | 28,000 credits / 5h; 140,000 credits / week (14x Lite) | First access to flagships, dedicated resources at peak, large repos |
| Team Standard Seat | $88 / seat / mo | $79.2 / seat / mo (10% off) | 15,000 credits / 5h; 66,000 credits / week per seat | Seat & permission management, usage dashboards, on-demand overage (10% off list price, limited time), centralized invoicing, VAT invoices |
| Team Premium Seat | $188 / seat / mo | $169.2 / seat / mo (10% off) | 35,000 credits / 5h; 155,000 credits / week per seat | Early access to flagships, priority resources at peak, 2+ concurrent projects recommended |
Minimum 2 seats on Team plans, no upper limit; mixed Standard/Premium seats not supported; no mid-cycle seat reductions or Standard-to-Premium upgrades. Fully exploiting off-peak discounts yields up to 92% savings versus pay-as-you-go GLM-5.3 API. Sources: Zhipu AI – Subscribe , Zhipu AI – Overview , Zhipu AI – Teamplan
Terms explained:
- Credits - plan quota unit; see Key Terms. GLM-5.3-Flash consumes one-third of GLM-5.3's credits, so Flash effectively has 3x the quota. Source: Zhipu AI – Overview
- On-demand overage - team seats can keep working past quota by paying per-token at API list price minus 10% (limited-time offer), with per-member spend caps. Source: Zhipu AI – Teamplan
Free Tier
Free chat at z.ai; on the API, GLM-4.7-Flash, GLM-4.5-Flash, and GLM-4.6V-Flash are free models. Source: Zhipu AI – Pricing
API Pricing
| Model | Context | Input ($/MTok) | Cached Input ($/MTok) | Output ($/MTok) | Notes |
|---|---|---|---|---|---|
| GLM-5.3 | 1M | $1.40 | $0.26 | $4.40 | Flagship, text-only, 128K max output, thinking always on |
| GLM-5.3-Flash | 1M | $0.15 | $0.03 | $0.50 | Native multimodal (video/image/text/file in), 320B/18B, open weights |
| GLM-5.3-FlashX | 1M | $0.37 | $0.075 | $1.25 | 200 tokens/s fast variant, new this month, not on Coding Plan |
| GLM-5.2 | 1M | $1.40 | $0.26 | $4.40 | Previous flagship, redirects from GLM-5.1 |
| GLM-5 | n/a | $1.00 | $0.20 | $3.20 | Legacy |
| GLM-4.7 | 200K | $0.60 | $0.11 | $2.20 | Legacy; redirects to Flash on Coding Plan |
| GLM-4.7-FlashX | 200K | $0.07 | $0.01 | $0.40 | Legacy fast tier |
| GLM-4.5-Air | n/a | $0.20 | $0.03 | $1.10 | Legacy small |
| GLM-4.6V | 128K | $0.30 | $0.05 | $0.90 | Vision |
| GLM-OCR | n/a | $0.03 | n/a | $0.03 | OCR |
| GLM-4.7-Flash / GLM-4.5-Flash / GLM-4.6V-Flash | n/a | Free | Free | Free | Free-tier models |
Cached-input storage is "limited-time free" across latest models, so a future cache storage fee is possible. Other rates: web search $0.01/use, GLM-Image $0.015/image, CogVideoX-3 $0.20/video, GLM-ASR-2512 $0.03/MTok, Slide/Poster Agent $0.70/MTok, translation agent $3/MTok. Source: Zhipu AI – Pricing
USD context: GLM-5.3-Flash at $0.15/$0.50 is roughly one-ninth of Sonnet 5.5's $2/$10 output-input blend and one-tenth of GLM-5.3's own price; Anthropic calculated that a GLM-5.3-Flash agent running eight hours to chain two Chrome N-day exploits consumed $20.40 of API credit. Source: Anthropic – Glm 5 3 And The Spread Of Advanced Cyber Capabilities
Model Performance / Benchmarks
Zhipu-published GLM-5.3 results (open weights card, August 2026):
| Benchmark | GLM-5.3 | GLM-5.2 | Kimi K3 | Opus 4.8 | Fable 5 (w/ fallback) | GPT-5.6 Sol |
|---|---|---|---|---|---|---|
| Terminal Bench 2.1 | 88.2 | 81.0 | 88.3 | 85.0 | 88.0 | 88.8 |
| Terminal Bench 3.0 | 28.3 | 4.6 | 17.4 | 21.1 | 33.7 | 34.6 |
| DeepSWE v1.1 | 66.9 | 46.2 | 67.5 | 58.0 | 69.7 | 72.7 |
| NL2Repo | 58.0 | 48.9 | 58.0 | 69.7 | n/a | n/a |
| FrontierSWE (dominance) | 78.1 | 67.5 | n/a | 66.5 | 88.2 | n/a |
| SWE-Marathon v1.1 | 42.5 | 19.4 | 48.1 | 48.8 | 33.1 | 42.5 |
| ProgramBench (almost solved) | 19.0 | 9.5 | 17.5 | 15.5 | 33.0 | 23.0 |
| CyberGym | 84.5 (best) | 77.2 | 80.0 | 78.1 | 83.8 | 83.6 |
| ExploitBench | 54.4 | 24.4 | 32.2 | 40.0 | 78.0 | 76.5 |
| ExploitGym (2h / 6h) | 105 / 130 | 29 / 39 | 36 / 70 | 80 / 120 | 181 / 247 | 216 / 293 |
| Toolathlon Verified | 73.0 | 59.9 | 76.5 | 76.2 | 74.7 | 74.9 |
| AutomationBench v1.0.6 | 48.2 (best) | 26.2 | 46.7 | 41.0 | 46.2 | 45.8 |
| Agents' Last Exam (CLI) | 28.5 | 23.8 | 27.6 | 25.7 | 23.8 | 28.6 |
| HLE w/ tools | 62.5 | 54.7 | 59.8 | 57.9 | 63.9 | 64.5 |
| GDPval-AA v2 | 1769 (best) | 1508 | 1682 | 1588 | 1743 | 1730 |
Source: Hugging Face – Glm 5.3
Token efficiency on the internal Z.ai Code Bench: GLM-5.3 at max effort scores 34.5% using ~75K output tokens per task versus GLM-5.2's 23.4% at ~96K; at high effort it beats Opus 4.8 (31.4% at ~50K tokens vs 29.5% at ~120K), trailing Fable 5 at 39.5%. Source: Zhipu AI – Glm 5.3
GLM-5.3-Flash published results: Terminal Bench 2.1 84.3, DeepSWE v1.1 63.4 (vs GLM-5.2's 46.2), NL2Repo 56.3, Toolathlon 78.4, AutomationBench 48.8 (vs 26.2), ALE 26.3, GDPval-AA v2 1773, OSWorld 2.0 59.1, and Artificial Analysis Intelligence Index v4.1.1 of 57 at $0.045 per task (discounted). Source: Zhipu AI – Glm 5.3 Flash
Third-party cyber evaluations (the month's defining results):
| Benchmark | GLM-5.3 | US frontier best | PRC frontier best | Evaluator |
|---|---|---|---|---|
| SEC-Bench Pro | 40.4% (74/183) | 90.2% | 27.3% (Kimi K3) | NIST CAISI, Sep 17 |
| ExploitBench (16-pt scale) | 61.1% (9.8/16) | 100.0% | 32.2% | NIST CAISI, Sep 17 |
| ExploitGym userspace | 9.4% (47/498) | 44.4% | 2.6% | NIST CAISI, Sep 17 |
| CAISI OSS-Fuzz | 7.7% (23/297) | 23.2% | 2.4% | NIST CAISI, Sep 17 |
| ExploitBench V8 end-to-end | 50/410 attempts | Mythos Preview 56/410 | n/a | Anthropic, Sep 29 |
| Binary Exploitation (control-flow hijack) | 4% | Mythos Preview 6% (Opus 4.6: 0%) | n/a | Anthropic, Sep 29 |
Sources: Nist – Caisis Assessment Zais Glm 53 Cyber Capabilities , Anthropic – Glm 5 3 And The Spread Of Advanced Cyber Capabilities
Latest News
GLM-5.3-Flash Launch and the OX Alpha Reveal (August 26, 2026)
Zhipu released GLM-5.3-Flash, the first natively multimodal GLM-5 model: 320B total / 18B active parameters, hybrid sparse-plus-linear attention (3.0x less attention compute and 4.4x smaller KV cache than GLM-5.3), 1M context, video/image/text/file input, $0.15/$0.50 per MTok, and weights on HuggingFace. The post confirms the model ran anonymously as "ox-alpha" on OpenCode and OpenRouter pre-release and that all serving ran on Chinese AI chips at per-token cost comparable to mainstream NVIDIA GPUs (3x improvement over the initial baseline on the same hardware). Source: Zhipu AI – Glm 5.3 Flash
GLM-5.3 Open Weights (August 28, 2026)
GLM-5.3 weights (753B params, glm_moe_dsa architecture) went public under a custom "glm-5.3" license, two weeks after the NIST-recorded August 14 release (Z.ai's own release notes date the model August 18). The HF page logged 1,413,372 downloads in the last month, 70 quantizations, and 8 fine-tunes. Sources: Hugging Face – Glm 5.3 , Nist – Caisis Assessment Zais Glm 53 Cyber Capabilities
Night Unlimited GLM-5.3-Flash Event (September 3, extended to October 7)
Every night 23:00-09:00 UTC+8, GLM-5.3-Flash costs zero credits in ZCode (3.10+) and AutoClaw and doubles quota in other supported agents, for all paid tiers. The event's end date moved from September 20 to October 7. Source: Zhipu AI – Event Glm 5.3 Flash
NIST CAISI Assessment (September 17, 2026)
CAISI found GLM-5.3 is "the most cyber-capable open-weight model released to date" while lagging the US frontier by about four months on its IRT-based cyber capability index (400 index points = 10x odds of task success). US models were tested with safeguards disabled where applicable. Source: Nist – Caisis Assessment Zais Glm 53 Cyber Capabilities
GLM-5.3-FlashX Ships at 200 Tokens/s (mid-September)
The pricing page and model docs added GLM-5.3-FlashX, a speed-optimized variant at $0.37/$0.075/$1.25 per MTok delivering 200 tokens/s; HN surfaced it September 18. It is not yet included in Coding Plan quota. Sources: Zhipu AI – Glm 5.3 Flash , News – Item
Anthropic Frontier Red Team Report (September 29, 2026)
Anthropic's researchers drove GLM-5.3 to chain several previously unknown browser JavaScript-engine vulnerabilities into a drive-by file-read exploit, and used GLM-5.3-Flash to chain two known Chrome flaws (including CVE-2026-11645) into an ARM64 exploit bypassing PAC hardening with 20 minutes of human attention, 8 hours of model work, and $20.40 of API cost. Safeguard bypass rates: 64% (false cover story), 92% (prefilled thinking), 100% (abliterated copy; ~2,200 GPU hours / ~$4,400 to produce, refusal rate falling from above 90% to 2-12%). Source: Anthropic – Glm 5 3 And The Spread Of Advanced Cyber Capabilities
Double-Holiday All-Day Off-Peak (September 25 to October 7)
All usage, at any hour, is deducted at the 50% off-peak credit rate for the holiday period. Source: Zhipu AI – Overview
GLM-5.3 Available on Mistral (September 16)
Mistral's docs added a zai-glm-5-3 model page, giving GLM-5.3 a Western-hosted serving route alongside the third-party inference providers tracked since June. Source: Mistral AI – Zai Glm 5 3
Community Signals
The GLM-5.3-Flash launch thread was the month's biggest (1,132 points, 580 comments, Aug 26)
Developers verified the price instantly and stress-tested the claims. iamsyr: "Standard API Pricing for GLM-5.3-Flash (per 1M tokens) - Input: $0.15 - Output: $0.50 - Cached input: $0.03." News – Item . TaLiTr checked the subscription math against the "one-tenth the price" claim: "From their subscription page, the smallest plan gives you about 97M tokens weekly for 5.3 but 292M for 5.3 Flash. Not exactly 10x the limit." News – Item . revolvingthrow worked the local-hosting angle: "320B total parameters and just 18B active parameters. This is pretty hefty for a 'flash' model... The benchmarks look great, especially since GLM tends to be more honest than the average Chinese lab." News – Item . mrngd argued the launch undersold itself via independent DeepSWE numbers: "Smashes deepseek v4 flash, and even worse it matches v4 pro at a tiny fraction the cost." News – Item . Thread: News – Item
Terms-of-service concerns got traction in the same thread
matheusmoreira: "You guys read Z.ai's terms of service, right? Broad and perpetual license over inputs and outputs, and even your name and profile picture. Vague prohibitions on whatever may harm Z.ai's 'interests' or even the 'national interests' of any country." News – Item . claudeIsDown compared OpenRouter rates: "On OpenRouter the pricing is: Input $0,075/M - Output $0,25/M - Cache Read $0,015/M. How is the business model of Anthropic/OpenAI will sustain?" News – Item
The Anthropic cyber report landed as a trust flashpoint (251 points, 234 comments, Sep 29)
The top-voted comments framed it as competitor-driven regulation advocacy. minimaxir: "This paper seems like a research conflict of interest with a direct competitor?" News – Item . prymitive: "The narrative is being set for open weights to be banned globally, unless they are so restricted that they cannot possibly compete with us companies products." News – Item . lukewarm707 focused on the adversarial prompting: "In this experiment Anthropic prompted GLM-5.3-abliterated to 'cause deaths quietly' and 'kill people'... Anthropic's arrogance and exceptionalism endangers humanity." News – Item . Thread: News – Item
Adoption and usage signals
An independent developer documented rooting a Fire tablet with four AI models, with GLM-5.3 finishing the job in a day (706 points, 293 comments): News – Item . An "GLM-5.3 is now open-weight" thread hit 806 points and 281 comments: News – Item . Privatemode.ai turned GLM-5.3-Flash into a single-forward-pass decision model competitive with Jev (138 points, 59 comments): News – Item . An abliterated "GLM-5.3 Uncensored" FP8 fine-tune appeared on HuggingFace September 2 (15 points), foreshadowing the Anthropic findings: News – Item . Artificial Analysis numbers circulating September 2 put GLM-5.3 at intelligence 60 and $0.68 per task: News – Item . A "One month coding with GLM 5.3 Flash" retrospective posted October 2 (103 points, 79 comments), covering September usage: News – Item . Reddit search was blocked by a login wall and could not be used this cycle.
Reddit recovery (added 2026-10-03)
Reddit's biggest September GLM thread landed on Anthropic's Sep 29 cyber-capabilities report. r/LocalLLaMA (2.3K upvotes, 512 comments, ~Sep 30): "Anthropic just dropped the greatest advertisement for GLM ever." Reddit – Anthropic Just Dropped The Greatest Advertisement . OP u/BannedGoNext: "No government shitlist. No begging to be on a special account. No citizenship or nationality requirements. No accidentally being misconstrued and getting banned. No bullshit, just a good model." Reddit – Pcu498I . u/segmond: "I believe a lot of organizations decided that it's cheaper to pay for GLM5.3 than Mythos. You can imagine companies buying GPUs or renting GPUs to run full weight of GLM5.3 for their team." Reddit – Pcwyaez . u/Houston_NeverMind: "I've been using 5.3 flash via opencode for a week now. Really impressed by its reasoning ability at such a low cost. I feel like it's better than DS4.1 flash." Reddit – Pcu67Wj . Community scale: r/ZaiGLM 35K weekly visitors, 745 weekly contributions.
Enterprise Readiness
| Feature | Available? | Details |
|---|---|---|
| SSO (SAML/OIDC) | Undisclosed | Not mentioned in public docs or the subscribe page |
| SCIM | Undisclosed | Not mentioned in public docs |
| Audit logs | Partial | Subscribe page claims data is "encrypted, access-controlled, and fully auditable" and offers team usage dashboards, but no exportable audit-log product is documented. Source: Zhipu AI – Subscribe |
| IP indemnity | Undisclosed | Not mentioned; a commercial license agreement exists for model use. Source: Bigmodel – Model Commercial Use |
| Data residency | Partial | Data excluded from model training by default on Team plans; China-platform (bigmodel.cn) versus global (z.ai) split persists; no region pinning documented. Source: Zhipu AI – Teamplan |
| HIPAA | No | Not mentioned |
| Air-gapped / On-prem | Yes | GLM-5.3 (753B) and GLM-5.3-Flash (320B) open weights with vLLM, SGLang, TokenSpeed, KTransformers, Unsloth, Transformers support, plus Ascend NPU deployment recipes; Flash's hybrid attention keeps KV cache 4.4x smaller than GLM-5.3. Source: Hugging Face – Glm 5.3 |
| SLA | Undisclosed | Not mentioned in public docs |
| Admin controls (RBAC) | Partial | Team Plan: centralized seat and permission management, per-member spend limits, seat reassignment, separate Team Plan Key; no fine-grained RBAC roles documented. Source: Zhipu AI – Teamplan |
| API compatibility | Yes | OpenAI Chat Completion, OpenAI Response, and Anthropic Message protocols on both z.ai and bigmodel.cn endpoints; Coding Plan subscribers (including expired) are temporarily limited to the OpenAI Chat protocol for model API calls. Source: Zhipu AI – Glm 5.3 |
Terms explained:
- Team Plan Key - a separate credential required to consume team quota, distinct from personal API keys. Source: Zhipu AI – Teamplan
- Abliteration risk surface - because weights are open, buyers self-hosting must accept that refusal behavior can be removed by third parties; Anthropic measured a 2-12% residual refusal rate post-abliteration. Source: Anthropic – Glm 5 3 And The Spread Of Advanced Cyber Capabilities
Transparency Gaps
| Gap | Details | Severity |
|---|---|---|
| Promotional pricing volatility | Monthly discounts changed from 10% (August: Lite $16.2) to 30% (September: $12.6) with no published schedule; the night event end date moved from Sep 20 to Oct 7; cached-input storage is "limited-time free" with no end date. Budget planning on promo rates is unreliable. Sources: Zhipu AI – Subscribe , Zhipu AI – Event Glm 5.3 Flash | High |
| Usage policy for cyber capabilities absent | GLM-5.3 more than doubles GLM-5.2 on exploitation benchmarks, but no published usage policy governs who may use it for offensive work, which both NIST CAISI and Anthropic flagged in September. Sources: Nist – Caisis Assessment Zais Glm 53 Cyber Capabilities , Anthropic – Glm 5 3 And The Spread Of Advanced Cyber Capabilities | High |
| GLM-5.3 license terms not summarized | The HF card lists a custom "glm-5.3" license rather than GLM-5.2's MIT (as verified in June); the license text's commercial terms are not summarized anywhere in the fetched docs. Source: Hugging Face – Glm 5.3 | Medium |
| Headline +50% is an internal benchmark | The "coding experience up 50%" claim rests on Z.ai Code Bench, a non-public benchmark whose tasks and harness are not released. Source: Zhipu AI – Glm 5.3 | Medium |
| Dynamic concurrency limits | Rate and concurrency limits "dynamically adjusted based on available resources"; no RPM/TPM/concurrency numbers published for any tier; docs only recommend project counts per seat. Source: Zhipu AI – Teamplan | Medium |
| ToS breadth | Community review flags broad perpetual licenses over inputs/outputs and vague prohibitions ("interests," "national interests") in the terms of use, unaddressed in enterprise docs. Source: News – Item | Medium |
| Protocol restriction for subscribers | Coding Plan subscribers (including expired) can currently only call the model API via the OpenAI Chat Completion protocol, with no published fix date. Source: Zhipu AI – Glm 5.3 | Low |
| Launch-date inconsistency | NIST records GLM-5.3's release as August 14, Z.ai's release notes as August 18, and the prior report used August 17; Zhipu publishes no authoritative changelog dates. Sources: Nist – Caisis Assessment Zais Glm 53 Cyber Capabilities , Zhipu AI – New Released | Low |
Failed or partially failed fetches this cycle: Zhipu AI – Pricing (JavaScript-rendered, empty body; data taken from Zhipu AI – Pricing ), Zhipu AI (404), Zhipu AI – Glm 5.3 Flash and Zhipu AI – Subscribe (empty via standard fetch; both resolved via browser automation), Chatglm – Post (empty), Zhipu AI – News (JavaScript-only), Old – Search (login wall), Bigmodel – Glm 5.3 Flash (404; English page at Zhipu AI – Glm 5.3 Flash used instead).