GLM-5.3

by Z.ai

Released 63 days after GLM-5.2 · All Z.ai releases

GLM-5.3 is Z.ai's flagship coding and agentic model, announced on August 14, 2026. It keeps the same mixture-of-experts base as GLM-5.2, the 744 billion parameter design with about 40 billion active per token, and every gain over its predecessor comes from a scaled-up post-training run rather than a new base. The model is text-only, supports a 1M-token context window with up to 128,000 tokens of output, and exposes a reasoning_effort parameter with low, high, and max levels that sets the thinking budget. Z.ai reports a 50% gain over GLM-5.2 on its in-house Code Bench, 28.3 on Terminal-Bench 3.0 against 4.6 for GLM-5.2, 66.9 on DeepSWE v1.1, and 88.2 on Terminal-Bench 2.1, and bills it as the most capable open-weights model for coding. The other headline is cybersecurity: vulnerability discovery was added to post-training and the capability grew faster than Z.ai expected, with a CyberGym score of 84.5, and the company says its models have turned up 2,436 vulnerabilities across 269 open-source projects since GLM-5.2. The weights were held back for a roughly two-week safety review before publication on Hugging Face, and unlike GLM-5.2 they ship under Z.ai's own GLM-5.3 license rather than MIT. It suits coding agents, long-horizon terminal work, and code review or vulnerability triage where the effort ladder lets you match reasoning depth to the task.

Call GLM-5.3 on Opper with the OpenAI SDK. Sign up without a credit card. Get started

Key info

Input
Output
Features
Context window
—
Max output
131K
Input price
$1.40 /1M$0.26 cache read
Output price
$4.40 /1M
Released
  • EU residency available
  • US residency available
  • Zero data retention on pay-as-you-go
  • GDPR DPA available

Available routes

GLM-5.3 runs on 18 different routes through the Opper gateway. Compare residency, zero data retention and training posture at a glance, with full data-handling detail per route below. In the EU it is served by GreenPT, Inceptron (Sweden), Melious (Germany) and 3 more. See every GLM model hosted in the EU.

ProviderRegionZero data retentionTrainingInputOutputCache read
Multi—Not established—$1.40$4.40$0.26
USNo$1.20$4.00$0.12
USNo$1.40$4.40$0.26
MultiNo$1.40$4.40$0.26
EUNo$1.25$5.00$0.31
EUNo$0.79$2.65$0.20
EUNo$1.14$3.41$0.23
EUNo$1.40$4.40$0.14
MultiNo (opt-in)$1.40$4.40$0.26
USNo$1.00$3.41$0.20
MultiNo$1.40$4.40Input price
USNo$1.40$4.40$0.26
USNo$1.40$4.40$0.26
EUNo$1.20$4.20$0.26
MultiNo$1.40$4.40$0.26
EUNo$1.75$4.50$0.44
USNo$1.19$4.40$0.26
MultiNo$1.40$4.40$0.26

Uptime and availability

GLM-5.3 runs on 6 independently monitored routes through the Opper gateway. A direct integration leaves you on one of them, the gateway serves whichever is healthy.

100%effective uptime, last 30 days
Averaged across these routes on their own, a single provider reached 99.65% over the same window.
Daily status through the gateway, which serves each request from whichever route is healthy.
6 monitored providers serve GLM-5.3.

Measured over the last 30 days from each provider's official status feed via StatusGator. Refreshed hourly. 12 further routes for this model are not on the board yet and are not counted above. See uptime for every provider Opper monitors.

Data handling per route

Each route hosting GLM-5.3 has its own privacy posture, residency, and GDPR terms. Postures are maintained by Opper with a last-verification timestamp.

Baidu Qianfan — China🇨🇳

Zero data retention posture is not established for this route. Training posture pending review. GLOBAL; unknown.

Zero data retention
Not established.
GDPR DPA
No DPA
Transfer mechanism
unknown

DeepInfra — United States🇺🇸

Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. US; unknown; DPA available.

Zero data retention
Yes. Nothing is logged, held for abuse monitoring or used for training.
Training
No training on customer data.
Logging
None
Abuse monitoring
No classifier
GDPR DPA
DPA available
Transfer mechanism
unknown

DigitalOcean — United States🇺🇸

Zero data retention with abuse monitoring: nothing is logged or used for training; content flagged by abuse monitoring is held for review. No training on customer data. US; dpf sccs; DPA available.

Zero data retention
With abuse monitoring, flagged content held.
Training
No training on customer data.
Logging
None
Abuse monitoring
Always on, holds flagged content, stored in United States
Caching
Content cached for replay
Subprocessor access
No subprocessor reads content
GDPR DPA
DPA available
Transfer mechanism
dpf sccs

Fireworks — Multi-region

Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. GLOBAL; SCCs; DPA available.

Zero data retention
Yes. Nothing is logged, held for abuse monitoring or used for training.
Training
No training on customer data.
Logging
None
Abuse monitoring
On by default, keeps nothing
Subprocessor access
Subprocessors may read content
GDPR DPA
DPA available
Transfer mechanism
SCCs

GreenPT — EU🇪🇺

Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. EU; DPA available.

Zero data retention
Yes. Nothing is logged, held for abuse monitoring or used for training.
Training
No training on customer data.
Logging
None
Abuse monitoring
Keeps nothing
Caching
Content cached for replay
Subprocessor access
Subprocessors may read content
GDPR DPA
DPA available
Transfer mechanism
Not applicable — data stays in EU

Inceptron — Sweden🇸🇪

Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. EU; DPA available.

Zero data retention
Yes. Nothing is logged, held for abuse monitoring or used for training.
Training
No training on customer data.
Logging
None
Abuse monitoring
On by default, keeps nothing
GDPR DPA
DPA available
Transfer mechanism
Not applicable — data stays in EU

Melious — Germany🇩🇪

Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. EU; DPA available.

Zero data retention
Yes. Nothing is logged, held for abuse monitoring or used for training.
Training
No training on customer data.
Logging
None
Abuse monitoring
No classifier
Subprocessor access
Subprocessors may read content
GDPR DPA
DPA available
Transfer mechanism
Not applicable — data stays in EU

Mistral — France🇫🇷

Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. EU; DPA available.

Zero data retention
Yes. Nothing is logged, held for abuse monitoring or used for training.
Training
No training on customer data.
Logging
None
Abuse monitoring
No classifier
Caching
Content cached for replay
GDPR DPA
DPA available
Transfer mechanism
Not applicable — data stays in EU

Modal — Multi-region

Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training by default; opt-in possible. GLOBAL; SCCs; DPA available.

Zero data retention
Yes. Nothing is logged, held for abuse monitoring or used for training.
Training
No training by default; opt-in possible.
Logging
None
Abuse monitoring
No classifier
Caching
Content cached for replay
GDPR DPA
DPA available
Transfer mechanism
SCCs

Morph — United States🇺🇸

Zero data retention with abuse monitoring: prompts and outputs are kept for up to 30 days for abuse monitoring only, and are not used for training. No training on customer data. US; SCCs; DPA available.

Zero data retention
With abuse monitoring, 30-day window.
Training
No training on customer data.
Logging
Abuse monitoring (30-day retention)
Abuse monitoring
On by default, holds flagged content, a person can view samples
GDPR DPA
DPA available
Transfer mechanism
SCCs

Nebius — Multi-region

Content is retained: provider logging. No training on customer data. GLOBAL; SCCs; DPA available.

Zero data retention
Retained: provider logging.
Training
No training on customer data.
Logging
Other
Abuse monitoring
No classifier
GDPR DPA
DPA available
Transfer mechanism
SCCs

Novita — United States🇺🇸

Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. US; SCCs; DPA available.

Zero data retention
Yes. Nothing is logged, held for abuse monitoring or used for training.
Training
No training on customer data.
Logging
None
Abuse monitoring
On by default, keeps nothing
GDPR DPA
DPA available
Transfer mechanism
SCCs

Perplexity — United States🇺🇸

Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. US; SCCs; DPA available.

Zero data retention
Yes. Nothing is logged, held for abuse monitoring or used for training.
Training
No training on customer data.
Logging
None
Abuse monitoring
On by default, keeps nothing
GDPR DPA
DPA available
Transfer mechanism
SCCs

Sference — EU🇪🇺

Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. EEA; SCCs; DPA available.

Zero data retention
Yes. Nothing is logged, held for abuse monitoring or used for training.
Training
No training on customer data.
Logging
None
Abuse monitoring
No classifier
Caching
Content cached for replay
Subprocessor access
No subprocessor reads content
GDPR DPA
DPA available
Transfer mechanism
SCCs

Tencent Cloud — Multi-region

Content is retained: limited debug logs, 30-day retention. No training on customer data. GLOBAL; SCCs; DPA available.

Zero data retention
Retained: limited debug logs, 30-day retention.
Training
No training on customer data.
Logging
Limited debug logs (30-day retention)
Abuse monitoring
On by default, holds flagged content
Caching
Content cached for replay
GDPR DPA
DPA available
Transfer mechanism
SCCs

TensorX — European Union🇪🇺

Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. EU; DPA available.

Zero data retention
Yes. Nothing is logged, held for abuse monitoring or used for training.
Training
No training on customer data.
Logging
None
Abuse monitoring
No classifier
Caching
Content cached for replay
GDPR DPA
DPA available
Transfer mechanism
Not applicable — data stays in EU

Wafer — United States🇺🇸

Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. US; SCCs; DPA available.

Zero data retention
Yes. Nothing is logged, held for abuse monitoring or used for training.
Training
No training on customer data.
Logging
None
Abuse monitoring
No classifier
GDPR DPA
DPA available
Transfer mechanism
SCCs

Z.ai — Singapore🇸🇬

Zero data retention with abuse monitoring: nothing is logged or used for training; content flagged by abuse monitoring is held for review. No training on customer data. GLOBAL; unknown; DPA available.

Zero data retention
With abuse monitoring, flagged content held.
Training
No training on customer data.
Logging
None
Abuse monitoring
On by default, holds flagged content
Caching
Content cached for replay
Subprocessor access
Subprocessors may read content
GDPR DPA
DPA available
Transfer mechanism
unknown

Benchmarks

Independent benchmark scores — composite indices for reasoning, coding, and math, plus individual eval scores where available.

Global rank#35 of 677 LLMs
TierStrong
Output speed70 tok/s
First token3.01s
Intelligence Index44.8
Coding Index74.8
Reasoning & knowledge
GPQA Diamond
92%
Humanity's Last Exam
42%
Long-context reasoning
80%
Coding
SciCode
59%

Get started

Call GLM-5.3 through the Opper gateway with one API key. Opper is drop-in compatible with the OpenAI, Anthropic and Google AI SDKs.

GLM-5.3 is a premium model on Opper. Sign up needs no credit card: you get an API key straight away and the free models work in the playground and the API. Add a card to use premium models, pay-as-you-go with no minimum.

Set it up with your agent

Copy this and paste it into a coding agent like Claude Code, Cursor or Codex and it'll wire up Opper for you.

Or call it directly

import OpenAI from "openai";
const client = new OpenAI({
apiKey: process.env.OPPER_API_KEY,
baseURL: "https://api.opper.ai/v3/compat",
});
const completion = await client.chat.completions.create({
model: "glm-5.3",
messages: [{ role: "user", content: "Hello" }],
});
console.log(completion.choices[0].message.content);

Use GLM-5.3 in your apps

Pick your tool to see how to run it on GLM-5.3 through Opper.

Compare GLM-5.3 with…

Side-by-side on privacy, EU hosting, pricing, and benchmarks.

Other models from Z.ai

Start building with 700+ models

One API key for every major provider, up and running in minutes.

Get startedView Documentation