GLM-5.3 (Workers AI)
| Maker | Z.ai |
|---|---|
| Family | GLM |
| Released | 2026-08-18 |
| Context | 1M |
| Max output | 1M |
| Open weights | GLM-5.3 License |
|---|---|
| Modalities | text → text |
| Input / 1M | $1.40 |
| Output / 1M | $4.40 |
| Review call | $0.0473 |
| Reasoning efforts | low, high, max |
|---|---|
| Hosts | Cloudflare Workers AI, OpenRouter |
| Model id | @cf/zai-org/glm-5.3 |
- Rank
- #3
- of 17
- Bugs caught
- 61%
- 50%–72%
- False alarms
- 1.9
- per clean PR
- Cost / review
- $0.0311
- Cost / bug
- $0.0559
- Time
- 65s
- per review
GLM-5.3 is hard to justify as a review seat while its Flash sibling exists: a GLM-5.3 review cost 8.8× a Flash one, for recall this benchmark can't separate. It caught 61% [50%–72%] of the known bugs; Flash caught 61% [50%–72%].
The one thing it buys is time. A review came back faster, in 65s, against 254s for Flash. If reviews gate a merge and the wait hurts, that can be worth paying for; otherwise it is money spent on nothing the run can measure. Noise doesn't separate them either: 1.9 [1.5–2.4] false alarms per clean PR here, and the two intervals overlap.
Price it against the closed models too. GPT-6.1 Sol measurably catches more, and a Sol review cost 1.3× a GLM-5.3 review. At that premium, a team without an open-weight requirement gets more for its money from Sol; the Sol comparison shows the bugs where they differ. Claude Opus 5.5 is also measurably ahead of it.
So where does it fit? Only where open weights are required and a review has to be fast. It ranks 3 of 17 and measurably beats 3 ranked models. Among the bugs it missed in every run is "[Security] Allow multiple OIDC discovery endpoints".
For the other open models it ran alongside, see the write-up of the open-weight runs.
Figures follow the latest benchmark run and price check. Text checked Nov 5, 2026.
| Host | Model id | Input / 1M | Output / 1M |
|---|---|---|---|
| Cloudflare Workers AI | @cf/zai-org/glm-5.3 | $1.40 | $4.40 |
Source: Workers AI pricing, Oct 16, 2026
By kind of bug
- Logic 14
- 52%
- Security 9
- 67%
- Concurrency 8
- 72%
- Error handling 5
- 65%
- API misuse 3
- 45%
- Resource handling 3
- 64%
Bug by bug
- Known bugs
- 42
- Caught every run
- 15
- Caught sometimes
- 21
- Missed
- 6
- Clean PRs
- 15
- False alarms on them
- 97
| Result | Pull request | Language | Kind |
|---|---|---|---|
| Caught every run | fix(saml): IdP-Initiated Callback Routingbetter-auth/better-auth | TypeScript | Security |
| Caught every run | Fixed #36226 -- Accepted str or bytes for password and salt in password hashers.django/django | Python | Error handling |
| Caught every run | Fix vsize = 2 issue in JSON createduckdb/duckdb | C++ | Concurrency |
| Caught every run | rpc : cache and reuse compute graphsggml-org/llama.cpp | C++ | Security |
| Caught every run | DatabaseQueue and DatabaseSnapshot reads can access task localsgroue/GRDB.swift | Swift | Concurrency |
| Caught every run | Refactor eventually to ensure wall-clock time usagekotest/kotest | Kotlin | Error handling |
| Caught every run | [12.x] Colocate Container build functions with the `Buildable` interfacelaravel/framework | PHP | Error handling |
| Caught every run | Remove child store from parent when invalidatedpointfreeco/swift-composable-architecture | Swift | Resource handling |
| Caught every run | UIKit: Fix switch presented child double dismisspointfreeco/swift-navigation | Swift | Logic |
| Caught every run | Apply bytesize and number of param limits in QueryParserrack/rack | Ruby | Security |
| Caught every run | Properly handle redirects in prerendered pagesremix-run/react-router | TypeScript | Security |
| Caught every run | Affix `Protocol` at top of client handshakerustls/rustls | Rust | Logic |
| Caught every run | Barrier wait in completion order + `Queue#close`.socketry/async | Ruby | Concurrency |
| Caught every run | time: move lazy-registration state into `Sleep`tokio-rs/tokio | Rust | Logic |
| Caught every run | Port Go's csrf protectionwithastro/astro | TypeScript | Logic |
| Model | Maker | Input / 1M | Output / 1M | Review call | Context |
|---|---|---|---|---|---|
| Mistral Large 4 | Mistral | $1.36 | $4.18 | $0.0457 | 1M |
| Qwen3.7 Max | Qwen | $1.475 | $4.425 | $0.0494 | 1M |
| DeepSeek V4 Pro | DeepSeek | $1.32 | $3.96 | $0.0442 | 1M |
| Muse Spark 1.2 | Meta | $1.25 | $4.25 | $0.043 | 1M |
Updated Nov 5, 2026