← The openness index

text-llm · Openness profile

Z.AI GLM (GLM-5.2, GLM-5.3, GLM-5.3 Flash)

Z.AI (Zhipu AI) · snapshot 2026-11-07

Explicitly open-weight: the most capable open-weights model for coding, with emergent cyber capability.

Tier 2 Restricted open-weight

What the publisher claims: open-weight

The one-liner: Open-weight frontier coding model, not a full open-source AI release under the strict rubric.

The six questions

A AccessScore 3 of 3

GLM-5.3 weights were published on Hugging Face on 28 August 2026 after a two-week safety evaluation, and GLM-5.3 Flash shipped with MIT weights at launch.

P PermissionScore 1 of 3

GLM-5.3 ships under a custom license that grants broad use, modification, and commercial rights but requires a Z.AI security review, with scope set by Z.AI, for Model-as-a-Service operators above $10B aggregate revenue; because the review gate sits with the vendor, the grant is conditional rather than clean.

D DeploymentScore 3 of 3

Independently hosted on widely available hardware with vLLM and SGLang support and a large provider ecosystem, with quantized community builds available.

T TransparencyScore 1 of 3

Architecture, parameter counts, post-training changes, and evaluation results including CyberGym scores are published, and the release was held back for documented safety evaluation, but no training data or reproducible recipe accompanies the weights.

R ReproducibilityScore 1 of 3

Limited: an equivalent model can be approximated from the published post-training description but not rebuilt.

G Governance & ParticipationScore 1 of 3

Z.AI publishes GLM weights and post-training change notes on Hugging Face and takes some outside tooling pull requests, but the release train and training data remain proprietary and internal.

License

Custom GLM-5.3 License for GLM-5.3; MIT retained for GLM-5.3 Flash and earlier GLM-5.x releases — license source ↗

What is actually released

Why it matters

Z.AI explicitly uses the open-weight label and discusses vulnerability-discovery training, while the release provides vendor-controlled security review and no OLMo-level reproducibility - the label and the evidence point in different directions.

Sources

Derived from the openness dataset behind But Is It Open? — snapshot 2026-11-07 ↗. Scores are qualitative readings of the cited evidence, not verdicts; tier measures openness, not intelligence.

← The openness indexJoin the newsletter ↗