GLM-5.2 "beats" Claude Code. Same week, a different benchmark says Opus wins by 14 points
Three benchmark stories about GLM-5.2 broke the same week, and they don't agree with each other. The disagreement is the actual story: single leaderboard numbers move with the harness, not just the model.
This week produced three separate "GLM-5.2 beats a frontier model" stories: it topped Claude Code on a Semgrep vulnerability benchmark, it topped the open-weight cluster on SWE-bench Pro, and it reportedly beat GPT-5.5 on long-horizon coding tasks for a sixth of the cost. All three are drawn from real numbers. None of them mean what the headline implies once you check which harness ran which model.
The receipts, read straight
- Semgrep's IDOR benchmark, minimal prompt-only harness: GLM-5.2 39% F1, Claude Code on Opus 4.6 37%, Claude Code on Opus 4.8/4.7 28%, at roughly $0.17 per vulnerability found for GLM-5.2.
- Same benchmark, Semgrep's own harnessed pipeline (Semgrep Multimodal): GPT-5.5 61% F1, Opus 4.8 53% F1 — both well above GLM-5.2's 39%.
- SWE-bench Pro, open-weight cluster: GLM-5.2 62.1%, Qwen3.7 Max 60.6%, Kimi K2.6 58.6%, DeepSeek V4 Pro 55.4% — all still behind Opus 4.8's reported 69.2% among active models on the same public leaderboard.
- Pricing: GLM-5.2 official rate $1.40 input / $4.40 output per million tokens (as low as $0.73 input on cheaper third-party hosts), versus Sonnet 5 at $2/$10 through August 31 then $3/$15 standard, versus Opus 4.8 at $5/$25.
Same week, three rankings that don't agree with each other
Is GLM-5.2 "better than Claude"? Depends which of the three stories you read. On the prompt-only IDOR run, yes, by 2 to 11 points. On the same IDOR benchmark with a real security harness wrapped around the frontier models, no, it loses to Opus 4.8 by 14 points and to GPT-5.5 by 22. On SWE-bench Pro it's the best open-weight model, which is a real and useful claim, but it is not the best model, full stop, since Opus 4.8's number sits 7 points above it on the same leaderboard. Three framings, three different winners, one model.
This is one task, one dataset, one run. IDOR detection is non-deterministic, the dataset is finite. — Semgrep
That caveat is doing more work than the headline it sits under. GLM-5.2's win over Claude Code was a win over Claude Code stripped of the harness Semgrep normally wraps around it. Give Opus 4.8 its actual tool scaffolding back and it jumps 25 points, past GLM-5.2 by a wide margin. The comparison that made headlines wasn't really model versus model. It was minimal-scaffold versus minimal-scaffold, wearing model names as labels.
The pricing headline has the same shape
GLM-5.2's per-token price is genuinely lower than Sonnet 5's or Opus 4.8's, by a wide margin. But Sonnet 5's updated tokenizer maps the same input to roughly 1.0 to 1.35 times as many tokens as before, so the sticker-price gap and the real invoice gap are not the same number. None of this erases GLM-5.2's cost advantage. It just means the advantage is smaller and messier than "one sixth the cost" suggests.
None of this is unique to GLM-5.2 or to Semgrep. It's what happens to any single leaderboard number: it encodes a specific task, a specific dataset, a specific harness, and a specific prompt, and every one of those variables can flip the ranking without the underlying models changing at all. A benchmark result is a photograph of one moment under one set of conditions, not a portrait of the model.
What a blind arena is actually for
This is the argument for running the same one-shot prompt across many models, live, and letting readers vote blind, over and over, rather than trusting any single leaderboard row. One run tells you what happened once, under one harness. A few hundred blind votes across varied prompts tell you something closer to a distribution, and a distribution is much harder to game by picking a favorable dataset or a generous scaffold. We've made this case before about effort levels hiding inside a single model and about why live outputs beat screenshots; the GLM-5.2 coverage this week is the same lesson wearing a different model's name.
If you want to see how GLM-5.2, Kimi K2.7, DeepSeek V4, Opus, and Sonnet 5 actually compare on real prompts rather than one dataset's IDOR set, open the coding arena and read the votes yourself rather than the headline about them. For readers following the same open-weight-versus-frontier story in Polish, nowosci.ai has been tracking the GLM-5.2 release in parallel.
GLM-5.2 is probably a genuinely strong open-weight model at a genuinely lower price, and that part of the story will likely hold up. What won't hold up is treating any single benchmark win as a verdict on the model, when the same week produced a benchmark, on the exact same task, where the ranking flips by double digits the moment you change the harness.
Don’t take the post’s word for it
The arena runs every model’s real output live. Pick a challenge, go blind, and cast a vote that counts in the public tally.
Open the arena