Gemma 3vsGLM-5.3
Gemma 3 | GLM-5.3 | |
|---|---|---|
| Specifications | ||
ParametersA rough measure of how big the model is. More parameters usually means more capable and more expensive to run, though it is a poor guide on its own — a smaller, newer model often beats a larger, older one. | — | 743B |
| API pricingUSD per 1M tokens · lower wins | ||
Cheapest inputLowest input rate across third-party providers, excluding the lab itself. The cheapest endpoint may run a quantised build or a shorter context — see "Available from" on the model page. | $0.05DeepInfra | $1.40Z.AI |
Cheapest outputLowest output rate across third-party providers, excluding the lab itself. May come from a different provider than the cheapest input. | $0.10DeepInfra | $4.40Z.AI |
| BenchmarksPublished by one model only | ||
DeepSWE 1.1Agentic coding — Artificial Analysis' independent test of deep, agentic software-engineering work — the AI has to plan and carry out substantial coding tasks end to end. (Version 1.1 of the test.) Higher is better. | — | 66.9% |
Terminal-Bench 3.0Agentic terminal coding — command-line task completion (v3.0, much harder task set) | — | 28.3% |
CyberGymCybersecurity — Tests the AI on cybersecurity challenges — finding and exploiting software weaknesses inside a safe sandbox. Higher is better. | — | 84.5% |
ExploitBenchCybersecurity — A 'capability ladder' for security research, built by CMU researchers: the AI is given known bugs in Chrome's V8 engine and scored on how far it gets toward a working exploit inside a research sandbox — from understanding the patch to triggering a crash. Higher is better. | — | 54.4% |
ExploitGym · 6-hour budgetCybersecurity — Can an AI agent turn a known software vulnerability into a working attack in a controlled lab? Built by MPI-SP researchers, the score is how many of 898 real cases (userspace programs, the V8 engine, the Linux kernel) it cracks — here with a 6-hour compute budget per case. Higher is better. | — | 130 |
ExploitGym · 2-hour budgetCybersecurity — Can an AI agent turn a known software vulnerability into a working attack in a controlled lab? Built by MPI-SP researchers, the score is how many of 898 real cases (userspace programs, the V8 engine, the Linux kernel) it cracks — here with a 2-hour compute budget per case. Higher is better. | — | 105 |
Humanity's Last Exam · with toolsMultidisciplinary reasoning — Humanity's Last Exam — extremely hard expert questions across many subjects. “With tools” means the AI is allowed to search the web or run code while answering. Higher is better. | — | 62.5% |
Agent's Last Exam · pass@1Agentic computer use — A hard set of desktop and operating-system tasks an AI agent has to finish by looking at the screen and working the machine itself. The score is the share it passes outright — partial credit does not count. Higher is better. | — | 28.5% |
AutomationBenchBusiness workflows — Tests whether the AI can run real multi-step business workflows — the kind of end-to-end office processes companies want to automate — from start to finish. Higher is better. | — | 48.2% |
GDPval-AA v2Knowledge work — economically valuable knowledge work (v2, re-based Elo) | — | 1769 |
| Overview | ||
| Company | Z.ai | |
| Release date | Mar 12 2025 | Aug 14 2026 |
| Access | Open Weight | Proprietary |
Other comparisons
Frequently asked questions
Gemma 3 and GLM-5.3 don't publish scores on any of the same benchmarks, so there's no direct head-to-head comparison. Gemma 3 shipped 520 days before GLM-5.3, so benchmark comparisons should account for the intervening progress.
Gemma 3 is open weight, while GLM-5.3 is proprietary.
Direct benchmark comparisons are unavailable — Gemma 3 and GLM-5.3 don't publish scores on any of the same benchmarks.
Gemma 3 was released by Google on Mar 12 2025.
GLM-5.3 was released by Z.ai on Aug 14 2026.
Gemma 3 is an open weight model released by Google. GLM-5.3 is a proprietary model released by Z.ai.