GPT-5.6 TerravsGLM-5.3
GPT-5.6 Terra | GLM-5.3 | |
|---|---|---|
| Specifications | ||
ParametersA rough measure of how big the model is. More parameters usually means more capable and more expensive to run, though it is a poor guide on its own — a smaller, newer model often beats a larger, older one. | — | 743B |
| API pricingUSD per 1M tokens · lower wins · base tier | ||
Input priceWhat you pay for everything you send the model — your question, plus any documents or earlier conversation you include with it. | $2.00 | — |
Output priceWhat you pay for the text the model writes back. It is normally the dearer half: producing an answer costs more than reading one. | $12.00 | — |
Cached input priceA reduced rate for text you send over and over. If every request starts with the same instructions or the same document, the provider keeps a copy ready and charges less to read it again. | $0.20 | — |
Cheapest inputLowest input rate across third-party providers, excluding the lab itself. The cheapest endpoint may run a quantised build or a shorter context — see "Available from" on the model page. | $2.00Azure | $1.40Z.AI |
Cheapest outputLowest output rate across third-party providers, excluding the lab itself. May come from a different provider than the cheapest input. | $12.00Azure | $4.40Z.AI |
| Benchmarks | ||
BullshitBench v2Nonsense detection — Given a confidently-worded but nonsensical prompt, does the AI spot that it makes no sense and push back — instead of playing along and inventing an answer? The score is how often it clearly called out the nonsense. Higher is better. | 53% | 71% |
| BenchmarksPublished by one model only | ||
Gray Swan IPI · k = 1Prompt injection robustness — Attackers hide malicious instructions inside content the AI reads — a web page, an email, a document — and try to hijack what it does. Gray Swan's indirect prompt injection benchmark measures how often such an attack succeeds when the attacker gets a single try. Lower is better. | 5.4% | — |
Gray Swan IPI · k = 10Prompt injection robustness — Attackers hide malicious instructions inside content the AI reads — a web page, an email, a document — and try to hijack what it does. This variant gives the attacker 10 tries and counts an attack as successful if any of them works. Lower is better. | 26% | — |
Gray Swan IPI · k = 15Prompt injection robustness — Attackers hide malicious instructions inside content the AI reads — a web page, an email, a document — and try to hijack what it does. This variant gives the attacker 15 tries and counts an attack as successful if any of them works. Lower is better. | 30.4% | — |
DeepSWE 1.1Agentic coding — Artificial Analysis' independent test of deep, agentic software-engineering work — the AI has to plan and carry out substantial coding tasks end to end. (Version 1.1 of the test.) Higher is better. | — | 66.9% |
Frontier-Bench v0.1Agentic computer work — A hard, ever-evolving set of real computer tasks — coding, system administration, data work, and more — that an AI agent has to complete on its own. Run by the Harbor / Laude Institute team as the successor to Terminal-Bench (v0.1 is the first release of the task set). The score is the share of tasks solved. Higher is better. | 20.8% | — |
Terminal-Bench 3.0Agentic terminal coding — command-line task completion (v3.0, much harder task set) | — | 28.3% |
Terminal-Bench 2.1Agentic terminal coding — Can the AI work in a command-line terminal — running commands and finishing technical setup tasks the way a developer would? Higher is better. | 84.3% | — |
BrowseCompWeb browsing — Can the AI browse the web and track down hard-to-find answers? Higher is better. | 87.5% | — |
CyberGymCybersecurity — Tests the AI on cybersecurity challenges — finding and exploiting software weaknesses inside a safe sandbox. Higher is better. | — | 84.5% |
ExploitBenchCybersecurity — A 'capability ladder' for security research, built by CMU researchers: the AI is given known bugs in Chrome's V8 engine and scored on how far it gets toward a working exploit inside a research sandbox — from understanding the patch to triggering a crash. Higher is better. | — | 54.4% |
ExploitGym · 6-hour budgetCybersecurity — Can an AI agent turn a known software vulnerability into a working attack in a controlled lab? Built by MPI-SP researchers, the score is how many of 898 real cases (userspace programs, the V8 engine, the Linux kernel) it cracks — here with a 6-hour compute budget per case. Higher is better. | — | 130 |
ExploitGym · 2-hour budgetCybersecurity — Can an AI agent turn a known software vulnerability into a working attack in a controlled lab? Built by MPI-SP researchers, the score is how many of 898 real cases (userspace programs, the V8 engine, the Linux kernel) it cracks — here with a 2-hour compute budget per case. Higher is better. | — | 105 |
Humanity's Last Exam · with toolsMultidisciplinary reasoning — Humanity's Last Exam — extremely hard expert questions across many subjects. “With tools” means the AI is allowed to search the web or run code while answering. Higher is better. | — | 62.5% |
ARC-AGI-2Abstract reasoning — Puzzle-style tests of abstract reasoning and pattern-finding — the kind of thing people find easy but AIs often struggle with. Higher is better. | 83.9% | — |
Agent's Last Exam · pass@1Agentic computer use — A hard set of desktop and operating-system tasks an AI agent has to finish by looking at the screen and working the machine itself. The score is the share it passes outright — partial credit does not count. Higher is better. | — | 28.5% |
AutomationBenchBusiness workflows — Tests whether the AI can run real multi-step business workflows — the kind of end-to-end office processes companies want to automate — from start to finish. Higher is better. | — | 48.2% |
GDPval-AA v2Knowledge work — economically valuable knowledge work (v2, re-based Elo) | — | 1769 |
| Overview | ||
| Company | OpenAI | Z.ai |
| Release date | Jun 26 2026 | Aug 14 2026 |
| Access | Proprietary | Proprietary |
Other comparisons
GPT-5.6 TerravsClaude Opus 5GLM-5.3vsClaude Opus 5GPT-5.6 TerravsGemini 3.7 FlashGLM-5.3vsGemini 3.7 FlashGPT-5.6 TerravsMuse GlimmerGLM-5.3vsMuse GlimmerGPT-5.6 TerravsGrok 4.6GLM-5.3vsGrok 4.6GPT-5.6 TerravsDeepSeek-V4-Pro-0813GLM-5.3vsDeepSeek-V4-Pro-0813GPT-5.6 TerravsMistral Medium 3.5GLM-5.3vsMistral Medium 3.5
Frequently asked questions
GLM-5.3 leads GPT-5.6 Terra on 1 of the 1 benchmark they both report (BullshitBench v2). Only GPT-5.6 Terra has a verified first-party API price: $2.00 per million input tokens and $12.00 per million output tokens. No pay-as-you-go API rate is tracked for GLM-5.3. GPT-5.6 Terra shipped 49 days before GLM-5.3, so benchmark comparisons should account for the intervening progress.
Published specifications for these two models are limited — see each model page for the latest details.
On BullshitBench v2, GLM-5.3 leads at 71% vs GPT-5.6 Terra at 53%.
GPT-5.6 Terra was released by OpenAI on Jun 26 2026.
GLM-5.3 was released by Z.ai on Aug 14 2026.
Only GPT-5.6 Terra has a verified first-party API price: $2.00 per million input tokens and $12.00 per million output tokens. No pay-as-you-go API rate is tracked for GLM-5.3. Rates are pay-as-you-go API prices verified on August 18, 2026.