Gemini 3.5 Flash CybervsGLM-5.3
Gemini 3.5 Flash Cyber | GLM-5.3 | |
|---|---|---|
| Specifications | ||
ParametersA rough measure of how big the model is. More parameters usually means more capable and more expensive to run, though it is a poor guide on its own — a smaller, newer model often beats a larger, older one. | — | 743B |
| API pricingUSD per 1M tokens · lower wins | ||
Cheapest inputLowest input rate across third-party providers, excluding the lab itself. The cheapest endpoint may run a quantised build or a shorter context — see "Available from" on the model page. | — | $1.17AkashML |
Cheapest outputLowest output rate across third-party providers, excluding the lab itself. May come from a different provider than the cheapest input. | — | $3.96AkashML |
| Benchmarks | ||
CyberGymCybersecurity — Tests the AI on cybersecurity challenges — finding and exploiting software weaknesses inside a safe sandbox. Higher is better. | 77.5% | 84.5% |
| BenchmarksPublished by one model only | ||
BullshitBench v2Nonsense detection — Given a confidently-worded but nonsensical prompt, does the AI spot that it makes no sense and push back — instead of playing along and inventing an answer? The score is how often it clearly called out the nonsense. Higher is better. | — | 71% |
DeepSWE 1.1Agentic coding — Artificial Analysis' independent test of deep, agentic software-engineering work — the AI has to plan and carry out substantial coding tasks end to end. (Version 1.1 of the test.) Higher is better. | — | 66.9% |
Terminal-Bench 4.0Agentic terminal coding — Can the AI work in a command-line terminal — running commands and finishing technical setup tasks the way a developer would? Version 4.0 recalibrated how much time, CPU and memory each task gets, removed eight tasks and fixed nineteen, so fewer runs fail for reasons that have nothing to do with the model. Scores are not comparable with earlier versions. Higher is better. | — | 41.82% |
Terminal-Bench 3.0Agentic terminal coding — command-line task completion (v3.0, much harder task set) | — | 28.3% |
Terminal-Bench 2.1Agentic terminal coding — Can the AI work in a command-line terminal — running commands and finishing technical setup tasks the way a developer would? Higher is better. | — | 88.2% |
ExploitBenchCybersecurity — A 'capability ladder' for security research, built by CMU researchers: the AI is given known bugs in Chrome's V8 engine and scored on how far it gets toward a working exploit inside a research sandbox — from understanding the patch to triggering a crash. Higher is better. | — | 54.4% |
ExploitGym · 6-hour budgetCybersecurity — Can an AI agent turn a known software vulnerability into a working attack in a controlled lab? Built by MPI-SP researchers, the score is how many of 898 real cases (userspace programs, the V8 engine, the Linux kernel) it cracks — here with a 6-hour compute budget per case. Higher is better. | — | 130 |
ExploitGym · 2-hour budgetCybersecurity — Can an AI agent turn a known software vulnerability into a working attack in a controlled lab? Built by MPI-SP researchers, the score is how many of 898 real cases (userspace programs, the V8 engine, the Linux kernel) it cracks — here with a 2-hour compute budget per case. Higher is better. | — | 105 |
Humanity's Last Exam · with toolsMultidisciplinary reasoning — Humanity's Last Exam — extremely hard expert questions across many subjects. “With tools” means the AI is allowed to search the web or run code while answering. Higher is better. | — | 62.5% |
Agent's Last Exam · pass@1Agentic computer use — A hard set of desktop and operating-system tasks an AI agent has to finish by looking at the screen and working the machine itself. The score is the share it passes outright — partial credit does not count. Higher is better. | — | 28.5% |
AutomationBenchBusiness workflows — Tests whether the AI can run real multi-step business workflows — the kind of end-to-end office processes companies want to automate — from start to finish. Higher is better. | — | 48.2% |
GDPval-AA v2Knowledge work — economically valuable knowledge work (v2, re-based Elo) | — | 1769 |
| Overview | ||
| Company | Z.ai | |
| Release date | Jul 21 2026 | Aug 14 2026 |
| Access | Proprietary | Open Weight |
Other comparisons
Gemini 3.5 Flash CybervsClaude Fable 5.1GLM-5.3vsClaude Fable 5.1Gemini 3.5 Flash CybervsGPT-5.6 SolGLM-5.3vsGPT-5.6 SolGemini 3.5 Flash CybervsMuse GlimmerGLM-5.3vsMuse GlimmerGemini 3.5 Flash CybervsGrok 4.6GLM-5.3vsGrok 4.6Gemini 3.5 Flash CybervsDeepSeek-V4-Pro-0813GLM-5.3vsDeepSeek-V4-Pro-0813Gemini 3.5 Flash CybervsMistral Medium 3.5GLM-5.3vsMistral Medium 3.5
Frequently asked questions
GLM-5.3 leads Gemini 3.5 Flash Cyber on 1 of the 1 benchmark they both report (CyberGym). Gemini 3.5 Flash Cyber shipped 24 days before GLM-5.3, so benchmark comparisons should account for the intervening progress.
Gemini 3.5 Flash Cyber is proprietary, while GLM-5.3 is open weight.
On CyberGym, GLM-5.3 leads at 84.5% vs Gemini 3.5 Flash Cyber at 77.5%.
Gemini 3.5 Flash Cyber was released by Google on Jul 21 2026.
GLM-5.3 was released by Z.ai on Aug 14 2026.
Gemini 3.5 Flash Cyber is a proprietary model released by Google. GLM-5.3 is an open weight model released by Z.ai.