Z.ai Ships GLM-5.3 to Paying Customers but Withholds the Weights

Z.ai announced GLM-5.3 overnight, describing a model post-trained on a 743-billion-parameter base that improves on agentic coding while producing fewer output tokens per task. The company says the model represents a large step on cybersecurity work relative to open models. Access is available now through the GLM Coding Plan and ZCode. Application programming interface (API) access and downloadable weights follow in stages, after what the company calls rigorous safety evaluations.

That staged rollout is the notable part of this release. Z.ai's previous releases went to Hugging Face within days under permissive licensing, and GLM-5.2 shipped with a Massachusetts Institute of Technology (MIT) license roughly three days after its coding-plan debut. GLM-5.2 posted 62.1 on SWE-bench Pro, 81.0 on Terminal-Bench 2.1 and 74.4 on FrontierSWE on those benchmarks at the time. No independent evaluation of GLM-5.3 exists yet, and the company has not published a benchmark table, so every capability claim currently traces back to the vendor.

The claim about cybersecurity capability touches an unresolved debate. The US Center for AI Standards and Innovation assessed GLM-5.2 and reported that it trailed GPT-5.5 and Claude Opus 4.7 on cyber and biology capability by a matter of months, and that it declined none of the offensive tasks it was given. The security vendor Semgrep separately found GLM-5.2 outperforming Claude on its internal vulnerability-detection benchmarks, at roughly $0.17 per confirmed finding. Whether that capability serves defense or offense depends on who downloads the model, which is exactly the question a staged release delays answering.

Developers following AI channels have focused on how far coding agents have advanced in a single quarter, with one widely circulated post asking whether the pace of improvement leaves much room for human implementation work. GLM-5.3 does not settle that question. It does mean that, for now, a low-cost coding model with credible performance is available only as a hosted service, not as a file anyone can download and run.