GPT-5.6 LunavsGLM-5.3
GPT-5.6 Luna | GLM-5.3 | |
|---|---|---|
| Specifications | ||
ParametersA rough measure of how big the model is. More parameters usually means more capable and more expensive to run, though it is a poor guide on its own — a smaller, newer model often beats a larger, older one. | — | 743B |
| API pricingUSD per 1M tokens · lower wins · base tier | ||
Input priceWhat you pay for everything you send the model — your question, plus any documents or earlier conversation you include with it. | $0.20 | — |
Output priceWhat you pay for the text the model writes back. It is normally the dearer half: producing an answer costs more than reading one. | $1.20 | — |
Cached input priceA reduced rate for text you send over and over. If every request starts with the same instructions or the same document, the provider keeps a copy ready and charges less to read it again. | $0.02 | — |
Cheapest inputLowest input rate across third-party providers, excluding the lab itself. The cheapest endpoint may run a quantised build or a shorter context — see "Available from" on the model page. | $0.20Azure | $1.40Z.AI |
Cheapest outputLowest output rate across third-party providers, excluding the lab itself. May come from a different provider than the cheapest input. | $1.20Azure | $4.40Z.AI |
| Benchmarks | ||
BullshitBench v2Nonsense detection — Given a confidently-worded but nonsensical prompt, does the AI spot that it makes no sense and push back — instead of playing along and inventing an answer? The score is how often it clearly called out the nonsense. Higher is better. | 40% | 71% |
| BenchmarksPublished by one model only | ||
Gray Swan IPI · k = 1Prompt injection robustness — Attackers hide malicious instructions inside content the AI reads — a web page, an email, a document — and try to hijack what it does. Gray Swan's indirect prompt injection benchmark measures how often such an attack succeeds when the attacker gets a single try. Lower is better. | 8.3% | — |
Gray Swan IPI · k = 10Prompt injection robustness — Attackers hide malicious instructions inside content the AI reads — a web page, an email, a document — and try to hijack what it does. This variant gives the attacker 10 tries and counts an attack as successful if any of them works. Lower is better. | 38.6% | — |
Gray Swan IPI · k = 15Prompt injection robustness — Attackers hide malicious instructions inside content the AI reads — a web page, an email, a document — and try to hijack what it does. This variant gives the attacker 15 tries and counts an attack as successful if any of them works. Lower is better. | 43.9% | — |
DeepSWE 1.1Agentic coding — Artificial Analysis' independent test of deep, agentic software-engineering work — the AI has to plan and carry out substantial coding tasks end to end. (Version 1.1 of the test.) Higher is better. | — | 66.9% |
Frontier-Bench v0.1Agentic computer work — A hard, ever-evolving set of real computer tasks — coding, system administration, data work, and more — that an AI agent has to complete on its own. Run by the Harbor / Laude Institute team as the successor to Terminal-Bench (v0.1 is the first release of the task set). The score is the share of tasks solved. Higher is better. | 14.3% | — |
Terminal-Bench 3.0Agentic terminal coding — command-line task completion (v3.0, much harder task set) | — | 28.3% |
Terminal-Bench 2.1Agentic terminal coding — Can the AI work in a command-line terminal — running commands and finishing technical setup tasks the way a developer would? Higher is better. | 82.5% | — |
CyberGymCybersecurity — Tests the AI on cybersecurity challenges — finding and exploiting software weaknesses inside a safe sandbox. Higher is better. | — | 84.5% |
ExploitBenchCybersecurity — A 'capability ladder' for security research, built by CMU researchers: the AI is given known bugs in Chrome's V8 engine and scored on how far it gets toward a working exploit inside a research sandbox — from understanding the patch to triggering a crash. Higher is better. | — | 54.4% |
ExploitGym · 6-hour budgetCybersecurity — Can an AI agent turn a known software vulnerability into a working attack in a controlled lab? Built by MPI-SP researchers, the score is how many of 898 real cases (userspace programs, the V8 engine, the Linux kernel) it cracks — here with a 6-hour compute budget per case. Higher is better. | — | 130 |
ExploitGym · 2-hour budgetCybersecurity — Can an AI agent turn a known software vulnerability into a working attack in a controlled lab? Built by MPI-SP researchers, the score is how many of 898 real cases (userspace programs, the V8 engine, the Linux kernel) it cracks — here with a 2-hour compute budget per case. Higher is better. | — | 105 |
Humanity's Last Exam · with toolsMultidisciplinary reasoning — Humanity's Last Exam — extremely hard expert questions across many subjects. “With tools” means the AI is allowed to search the web or run code while answering. Higher is better. | — | 62.5% |
Agent's Last Exam · pass@1Agentic computer use — A hard set of desktop and operating-system tasks an AI agent has to finish by looking at the screen and working the machine itself. The score is the share it passes outright — partial credit does not count. Higher is better. | — | 28.5% |
AutomationBenchBusiness workflows — Tests whether the AI can run real multi-step business workflows — the kind of end-to-end office processes companies want to automate — from start to finish. Higher is better. | — | 48.2% |
GDPval-AA v2Knowledge work — economically valuable knowledge work (v2, re-based Elo) | — | 1769 |
| Overview | ||
| Company | OpenAI | Z.ai |
| Release date | Jun 26 2026 | Aug 14 2026 |
| Access | Proprietary | Proprietary |
Other comparisons
GPT-5.6 LunavsClaude Opus 5GLM-5.3vsClaude Opus 5GPT-5.6 LunavsGemini 3.7 FlashGLM-5.3vsGemini 3.7 FlashGPT-5.6 LunavsMuse GlimmerGLM-5.3vsMuse GlimmerGPT-5.6 LunavsGrok 4.6GLM-5.3vsGrok 4.6GPT-5.6 LunavsDeepSeek-V4-Pro-0813GLM-5.3vsDeepSeek-V4-Pro-0813GPT-5.6 LunavsMistral Medium 3.5GLM-5.3vsMistral Medium 3.5
Frequently asked questions
GLM-5.3 leads GPT-5.6 Luna on 1 of the 1 benchmark they both report (BullshitBench v2). Only GPT-5.6 Luna has a verified first-party API price: $0.20 per million input tokens and $1.20 per million output tokens. No pay-as-you-go API rate is tracked for GLM-5.3. GPT-5.6 Luna shipped 49 days before GLM-5.3, so benchmark comparisons should account for the intervening progress.
Published specifications for these two models are limited — see each model page for the latest details.
On BullshitBench v2, GLM-5.3 leads at 71% vs GPT-5.6 Luna at 40%.
GPT-5.6 Luna was released by OpenAI on Jun 26 2026.
GLM-5.3 was released by Z.ai on Aug 14 2026.
Only GPT-5.6 Luna has a verified first-party API price: $0.20 per million input tokens and $1.20 per million output tokens. No pay-as-you-go API rate is tracked for GLM-5.3. Rates are pay-as-you-go API prices verified on August 18, 2026.