Compare AI models
| API pricingUSD per 1M tokens · lower wins · base tier | ||
Input priceWhat you pay for everything you send the model — your question, plus any documents or earlier conversation you include with it. | $0.66 | $0.75 |
Output priceWhat you pay for the text the model writes back. It is normally the dearer half: producing an answer costs more than reading one. | $1.98 | $3.75 |
Cached input priceA reduced rate for text you send over and over. If every request starts with the same instructions or the same document, the provider keeps a copy ready and charges less to read it again. | $0.022 | $0.075 |
Cheapest inputLowest input rate across third-party providers, excluding the lab itself. The cheapest endpoint may run a quantised build or a shorter context — see "Available from" on the model page. | $0.2442Baidu | $0.375Google |
Cheapest outputLowest output rate across third-party providers, excluding the lab itself. May come from a different provider than the cheapest input. | $0.7326Baidu | $1.875Google |
| Benchmarks | ||
BullshitBench v2Nonsense detection — Given a confidently-worded but nonsensical prompt, does the AI spot that it makes no sense and push back — instead of playing along and inventing an answer? The score is how often it clearly called out the nonsense. Higher is better. | 35% | 39% |
ARC-AGI-2Abstract reasoning — Puzzle-style tests of abstract reasoning and pattern-finding — the kind of thing people find easy but AIs often struggle with. Higher is better. | 61.3% | 60.4% |
Gray Swan IPI · k = 1Prompt injection robustness — Attackers hide malicious instructions inside content the AI reads — a web page, an email, a document — and try to hijack what it does. Gray Swan's indirect prompt injection benchmark measures how often such an attack succeeds when the attacker gets a single try. Lower is better. | — | 7.3% |
Gray Swan IPI · k = 10Prompt injection robustness — Attackers hide malicious instructions inside content the AI reads — a web page, an email, a document — and try to hijack what it does. This variant gives the attacker 10 tries and counts an attack as successful if any of them works. Lower is better. | — | 32.2% |
Gray Swan IPI · k = 15Prompt injection robustness — Attackers hide malicious instructions inside content the AI reads — a web page, an email, a document — and try to hijack what it does. This variant gives the attacker 15 tries and counts an attack as successful if any of them works. Lower is better. | — | 37.3% |
ProgramBenchProgram reconstruction — The AI receives a working program and its documentation, then builds a replacement from scratch without the original source code, internet access or decompilation. The score is the percentage of 200 programs that pass every behavioral test. We record each model's best published mini-SWE-agent result, including higher reasoning efforts where available. Partial test-pass rates and almost-solved programs do not count toward this score. Equal scores share a rank here; the official board also uses partial progress to break ties. Higher is better. | — | 0.5% |
SWE-Bench VerifiedCoding — Real coding tasks pulled from open-source projects — the AI has to find and fix actual bugs. A human-checked version of the original SWE-Bench. Higher is better. | 80.6% | — |
DeepSWE 1.1Agentic coding — Artificial Analysis' independent test of deep, agentic software-engineering work — the AI has to plan and carry out substantial coding tasks end to end. (Version 1.1 of the test.) Higher is better. | — | 49% |
MLE-BenchML engineering — Can the AI do the work of a machine-learning engineer? It competes in real Kaggle competitions — building, training, and tuning models end to end — and the score reflects how well it places. Higher is better. | — | 63.9% |
Terminal-Bench 2.1Agentic terminal coding — Can the AI work in a command-line terminal — running commands and finishing technical setup tasks the way a developer would? Higher is better. | 87.9% | — |
Toolathlon-VerifiedPersonal tool use — Tests how well the AI uses everyday personal tools and apps to get things done — a human-checked version of Toolathlon. Higher is better. | 74.1% | — |
BU BenchBrowser agent — Can the AI drive a real web browser to finish tasks — clicking, filling forms, and navigating sites the way a person would? Run by Browser Use on their BU Bench task set. Higher is better. | — | 68% |
BrowseCompWeb browsing — Can the AI browse the web and track down hard-to-find answers? Higher is better. | 83.4% | — |
CyberGymCybersecurity — Tests the AI on cybersecurity challenges — finding and exploiting software weaknesses inside a safe sandbox. Higher is better. | 83.3% | — |
Humanity's Last Exam · no toolsMultidisciplinary reasoning — Humanity's Last Exam — extremely hard expert questions across many subjects, written so you can't just look up the answer. “No tools” means the AI answers on its own. Higher is better. | 42.7% | — |
Humanity's Last Exam · with toolsMultidisciplinary reasoning — Humanity's Last Exam — extremely hard expert questions across many subjects. “With tools” means the AI is allowed to search the web or run code while answering. Higher is better. | 60% | — |
OSWorld-VerifiedAgentic computer use — Can the AI actually operate a computer — clicking, typing, and using real apps — to finish tasks on its own? Higher is better. | — | 83% |
AutomationBenchBusiness workflows — Tests whether the AI can run real multi-step business workflows — the kind of end-to-end office processes companies want to automate — from start to finish. Higher is better. | 31.8% | — |
GDPval-AA v2Knowledge work — economically valuable knowledge work (v2, re-based Elo) | — | 1421 |
threejsevalCommunity preference (Three.js) — Every model gets the same prompt — "the Eiffel Tower", "a glass fishbowl", "a robot arm picking toys into a box" — and builds a 3D scene in Three.js. Real people then see two scenes side by side, names hidden, and vote for the one they prefer. The votes become a chess-style Elo rating on threejseval.com, averaged across all the prompts. It measures whether the scene looks and moves right to a human eye, not whether the code passes a test. Higher is better. | — | 1359 |
| Overview | ||
| Company | DeepSeek | |
| Release date | Aug 13 2026 | Jul 21 2026 |
| Access | Open Weight | Closed |
| Model details | View model | View model |
Other comparisons
DeepSeek-V4-Pro-0813vsClaude Opus 5.5Gemini 3.6 FlashvsClaude Opus 5.5DeepSeek-V4-Pro-0813vsGPT-6 SolGemini 3.6 FlashvsGPT-6 SolDeepSeek-V4-Pro-0813vsMuse Spark 1.3Gemini 3.6 FlashvsMuse Spark 1.3DeepSeek-V4-Pro-0813vsGrok 4.7Gemini 3.6 FlashvsGrok 4.7DeepSeek-V4-Pro-0813vsMistral Medium 3.5Gemini 3.6 FlashvsMistral Medium 3.5DeepSeek-V4-Pro-0813vsKimi K3Gemini 3.6 FlashvsKimi K3Frequently asked questions
DeepSeek-V4-Pro-0813 and Gemini 3.6 Flash are evenly matched across the 2 benchmarks they both report (BullshitBench v2, ARC-AGI-2). DeepSeek-V4-Pro-0813 is cheaper on both input and output: $0.66 vs $0.75 per million input tokens, and $1.98 vs $3.75 per million output tokens. Figures are base-tier rates. Gemini 3.6 Flash shipped 23 days before DeepSeek-V4-Pro-0813, so benchmark comparisons should account for the intervening progress.
DeepSeek-V4-Pro-0813 is open weight, while Gemini 3.6 Flash is closed.
On BullshitBench v2, Gemini 3.6 Flash leads at 39% vs DeepSeek-V4-Pro-0813 at 35%. On ARC-AGI-2, DeepSeek-V4-Pro-0813 leads at 61.3% vs Gemini 3.6 Flash at 60.4%.