Zhipu’srelease notefor GLM-5.3 contains a sentence that did not make it into most of the coverage. Describing its own cybersecurity results, the Beijing company writes that capability “is growing fastest exactly where we are furthest behind.”
Zhipu, which also trades as Z.ai, is one of a handful of Chinese labs releasing models that compete with the American frontier. On August 14, it launched GLM-5.3, a coding-focused model, and published a technical release note setting out how the model performs against its rivals. That note is the source for everything reported here.
The claim that travelled was about security. Alongside the coding results, Zhipu said GLM-5.3 had become unexpectedly good at finding software vulnerabilities, scoring 84.5% on a benchmark called CyberGym against 83.8% for Anthropic’s Mythos 5 and 83.6% for OpenAI’s GPT-5.6 Sol. Headlines followed reporting that a Chinese model now out-finds the American ones at bug hunting.
The reason that lands harder than a usual benchmark result is what vulnerability discovery has become. A model that can read a codebase and locate exploitable flaws is useful to a defender auditing their own software and useful to anyone doing the same to somebody else’s. Anthropic’s equivalent work sits behind restricted access for that reason, while Zhipu intends to publish GLM-5.3’s weights for anyone to download.
Zhipu’s own release is more measured than the coverage it produced. The CyberGym number is real, and it is in the paper. It is also the narrowest of the three cybersecurity results the company published, and Zhipu is upfront that the other two go the other way.
CyberGym starts from source code the model can read and tests whether it can find a vulnerability and confirm the flaw is genuine. That is the result that travelled, and the margin is seven tenths of a percentage point.
ExploitBench asks something harder, requiring the model to reason about a real vulnerability and how it would be exploited. GLM-5.3 scores 54.4%, more than double its predecessor’s 24.4%. Mythos 5 scores 78.0% and GPT-5.6 Sol 76.5%.
ExploitGym counts how many exploitation tasks a model finishes inside a fixed time budget. GLM-5.3 completes 105 tasks in two hours and 130 in six. Mythos 5 completes 181 and 247.
Those two results have been reported thinly, and they are the ones that describe the gap. Finding a flaw and building a working exploit from it are different jobs. Zhipu’s reading is that the further along that chain a test sits, the further behind its model is, and the company says so in the release rather than leaving it to be discovered.
Part of the confusion in the coverage comes from Zhipu comparing three different Anthropic models in three different places. The main benchmark table sets GLM-5.3 against Opus 4.8. The performance charts use Fable 5. The cybersecurity section uses Mythos 5. Anyone reading quickly comes away with a single comparison that does not exist.
On coding, the picture is mixed rather than dominant. GLM-5.3 leads Opus 4.8 on some tests and trails it on others, and Zhipu states plainly that its model remains behind Claude Fable 5 on the company’s own internal coding benchmark.
The methodology footnotes contain something the summaries skipped. Zhipu evaluated GLM-5.3 on CyberGym, ExploitGym, ExploitBench, Terminal Bench and several other tasks inside Claude Code 2.1.207, Anthropic’s coding agent.