GPT‑6 Cyber vs. GLM-5.3

GPT-6 Cyber is a frontier AI cybersecurity model developed by OpenAI to support autonomous vulnerability research, exploit validation, secure software development, and advanced security testing. The model is specifically trained to investigate complex software environments, discover exploitable vulnerabilities, and help security professionals develop effective remediation strategies. Its capabilities include source code analysis, reverse engineering, vulnerability reproduction, exploit development, and investigation of security weaknesses across large software projects. GPT-6 Cyber can conduct extended security research workflows that involve identifying potential attack paths, testing hypotheses, validating technical findings, and producing reproducible evidence for security teams. During OpenAI's research campaigns, the model identified 81 previously unknown high-severity Firefox vulnerabilities and helped develop candidate patches for affected components. It also reproduced 1,724 Linux kernel vulnerabilities and generated working exploits for 948 of them, demonstrating its ability to validate security issues at scale. On the ExploitGym benchmark, GPT-6 Cyber achieved a 48.5% success rate compared with 32.1% for GPT-5.6 Cyber, while achieving 40.3% vulnerability recall in an internal web penetration testing evaluation. The model incorporates specialized alignment training to follow authorized testing scopes, respect security restrictions, and avoid exploiting systems that fall outside the researcher's stated objectives. In OpenAI's ExploitGym Honeypot evaluation, GPT-6 Cyber avoided attacking out-of-scope services in 99.93% of tests without deployment safety instructions and 100% of tests when those instructions were included. Its deployment safeguards include misalignment monitoring, misuse detection, IP allowlisting for API access, human oversight recommendations, and additional protections for operational technology and critical infrastructure systems.

GLM-5.3 is Z.ai’s frontier coding model built to improve complex software engineering, long-horizon agent work, and advanced technical reasoning through scaled post-training. The model uses the same base model as GLM-5.2, with performance gains coming from additional post-training environments, more diverse tasks, and expanded compute on the existing training stack. Z.ai’s stack includes IndexShare for efficient long-context processing, SAO for reinforcement learning on long-horizon tasks, and slime for large-scale asynchronous post-training. GLM-5.3 is designed to perform better on work that resembles real engineering tasks rather than short coding exercises. Its training environments include production-style workflows where the model must diagnose bottlenecks, inspect documentation, use codebases, run experiments, implement changes, and produce measurable improvements. The model improves coding performance across public and private benchmarks, including Terminal Bench 3.0, DeepSWE, Agents’ Last Exam, and Z.ai Code Bench. GLM-5.3 also improves token efficiency, producing stronger agentic coding results than GLM-5.2 while using fewer output tokens in Z.ai’s internal evaluations. The model supports three reasoning effort levels, low, high, and max, and no longer supports disabling thinking. Z.ai recommends max reasoning effort for coding tasks, while applications using disabled thinking must migrate to enabled thinking before switching to GLM-5.3. The release also reports emergent cyber capabilities, including stronger vulnerability discovery and exploitation-chain reasoning, with open-weight release planned after safety evaluation and hardening. By combining scaled post-training, long-context infrastructure, long-horizon reinforcement learning, coding-agent workflows, benchmark improvements, reasoning controls, and ZCode integration, GLM-5.3 helps developers and researchers work on demanding coding and agentic tasks.