Gemini 3.5 FlashvsComposer 2.5
Gemini 3.5 Flash | Composer 2.5 | |
|---|---|---|
| API pricingUSD per 1M tokens · lower wins | ||
Input priceWhat you pay for everything you send the model — your question, plus any documents or earlier conversation you include with it. | $1.50 | — |
Output priceWhat you pay for the text the model writes back. It is normally the dearer half: producing an answer costs more than reading one. | $9.00 | — |
Cached input priceA reduced rate for text you send over and over. If every request starts with the same instructions or the same document, the provider keeps a copy ready and charges less to read it again. | $0.15 | — |
| Benchmarks | ||
SWE-Bench ProAgentic coding — Can the AI fix real bugs in real software? It's handed actual problems from open-source projects and has to write code that genuinely solves them. Higher is better. | 55.1% | 54% |
Terminal-Bench 2.1Agentic terminal coding — Can the AI work in a command-line terminal — running commands and finishing technical setup tasks the way a developer would? Higher is better. | 76.2% | 73% |
| BenchmarksPublished by one model only | ||
BullshitBench v2Nonsense detection — Given a confidently-worded but nonsensical prompt, does the AI spot that it makes no sense and push back — instead of playing along and inventing an answer? The score is how often it clearly called out the nonsense. Higher is better. | 20% | — |
Gray Swan IPI · k = 1Prompt injection robustness — Attackers hide malicious instructions inside content the AI reads — a web page, an email, a document — and try to hijack what it does. Gray Swan's indirect prompt injection benchmark measures how often such an attack succeeds when the attacker gets a single try. Lower is better. | 14.1% | — |
Gray Swan IPI · k = 10Prompt injection robustness — Attackers hide malicious instructions inside content the AI reads — a web page, an email, a document — and try to hijack what it does. This variant gives the attacker 10 tries and counts an attack as successful if any of them works. Lower is better. | 54.2% | — |
Gray Swan IPI · k = 15Prompt injection robustness — Attackers hide malicious instructions inside content the AI reads — a web page, an email, a document — and try to hijack what it does. This variant gives the attacker 15 tries and counts an attack as successful if any of them works. Lower is better. | 60.5% | — |
SWE-Bench MultilingualMultilingual coding — Like SWE-Bench, but the coding problems span many programming languages, not just one. Tests how broadly the AI can code. Higher is better. | — | 79.8% |
DeepSWE 1.1Agentic coding — Artificial Analysis' independent test of deep, agentic software-engineering work — the AI has to plan and carry out substantial coding tasks end to end. (Version 1.1 of the test.) Higher is better. | 37% | — |
DeepSWE 1.0Agentic coding — Artificial Analysis' independent test of deep, agentic software-engineering work — the AI has to plan and carry out substantial coding tasks end to end. Higher is better. | — | 18% |
MLE-BenchML engineering — Can the AI do the work of a machine-learning engineer? It competes in real Kaggle competitions — building, training, and tuning models end to end — and the score reflects how well it places. Higher is better. | 49.7% | — |
Next.js EvalsNext.js coding — Vercel's open eval of how well AI coding agents build and migrate real Next.js apps — measured as the share of tasks the agent completes successfully. Higher is better. | — | 81% |
Terminal-Bench 2.0Agentic terminal coding — Can the AI work in a command-line terminal — running commands and finishing technical setup tasks the way a developer would? (Version 2.0 of the test.) Higher is better. | — | 69.3% |
MCP AtlasMulti-step tool use — Can the AI chain together many tools and steps to complete one bigger task, rather than doing just a single thing? Higher is better. | 83.6% | — |
ToolathlonGeneral tool use — Tests how well the AI uses everyday real-world tools and apps to get things done. Higher is better. | 56.5% | — |
BU BenchBrowser agent — Can the AI drive a real web browser to finish tasks — clicking, filling forms, and navigating sites the way a person would? Run by Browser Use on their BU Bench task set. Higher is better. | 58% | — |
Humanity's Last Exam · no toolsMultidisciplinary reasoning — Humanity's Last Exam — extremely hard expert questions across many subjects, written so you can't just look up the answer. “No tools” means the AI answers on its own. Higher is better. | 40.2% | — |
Humanity's Last Exam · with toolsMultidisciplinary reasoning — Humanity's Last Exam — extremely hard expert questions across many subjects. “With tools” means the AI is allowed to search the web or run code while answering. Higher is better. | 40.2% | — |
ARC-AGI-2Abstract reasoning — Puzzle-style tests of abstract reasoning and pattern-finding — the kind of thing people find easy but AIs often struggle with. Higher is better. | 72.1% | — |
OSWorld-VerifiedAgentic computer use — Can the AI actually operate a computer — clicking, typing, and using real apps — to finish tasks on its own? Higher is better. | 78.4% | — |
Finance Agent v2Agentic financial analysis — Tests the AI on real financial-analysis work, like digging through reports and making sound decisions. Higher is better. | 57.9% | — |
GDPval-AAKnowledge work — Measures how well the AI does economically valuable knowledge work, judged against human experts. Shown as a rating (like a chess Elo) — higher is better. | 1656 | — |
GDPval-AA v2Knowledge work — economically valuable knowledge work (v2, re-based Elo) | 1349 | — |
CharXiv ReasoningChart reasoning — Can the AI read and reason about complex charts and figures, not just text? Higher is better. | 84.2% | — |
MMMU-ProMultimodal reasoning — A tougher version of MMMU — college-level questions that mix images, diagrams, and text together. Higher is better. | 83.6% | — |
Blueprint-Bench 2Spatial reasoning — Can the AI reason about space and layout — for example, understanding a floor plan or blueprint? Higher is better. | 33.6% | — |
MRCR v2 (8-needle) · 128k averageLong context — Tests whether the AI can find specific details buried inside a very long document (around 128k tokens — roughly a long book). Higher is better. | 77.3% | — |
MRCR v2 (8-needle) · 1M pointwiseLong context — Tests whether the AI can find specific details buried inside an enormous document (around 1 million tokens — many books). Higher is better. | 26.6% | — |
| Overview | ||
| Company | SpaceXAI | |
| Release date | May 19 2026 | May 18 2026 |
| Access | Proprietary | Proprietary |
Other comparisons
Frequently asked questions
Gemini 3.5 Flash leads Composer 2.5 on 2 of the 2 benchmarks they both report (SWE-Bench Pro, Terminal-Bench 2.1). Only Gemini 3.5 Flash has a verified first-party API price: $1.50 per million input tokens and $9.00 per million output tokens. No pay-as-you-go API rate is tracked for Composer 2.5. Composer 2.5 shipped 1 days before Gemini 3.5 Flash, so benchmark comparisons should account for the intervening progress.
Published specifications for these two models are limited — see each model page for the latest details.
On SWE-Bench Pro, Gemini 3.5 Flash leads at 55.1% vs Composer 2.5 at 54%. On Terminal-Bench 2.1, Gemini 3.5 Flash leads at 76.2% vs Composer 2.5 at 73%.