Amazon starts selling Zhipu's GLM-5.3 after Anthropic found its safeguards bypassed 63% to 100% of the time

On October 5, AWS listed Zhipu's GLM-5.3 in Amazon Bedrock under a revenue-sharing deal that pays the Chinese lab by customer usage↗ ¹. Zhipu's Hong Kong shares, ticker 02513, jumped 7.59% that session ³. Nothing changed about the model itself: it shipped on Z.ai's own API on August 14, with weights following weeks later ⁹. What changed is distribution. A 744-billion-parameter open-weight model built by a Chinese lab now bills through Amazon, and a team already running Claude on Bedrock can call it with the same IAM roles and compliance posture ¹.

The pricing does the selling

GLM-5.3 lists at $1.40 per million input tokens and $4.40 per million output tokens ¹, the same shelf price its predecessor carried in June ⁹. Bedrock is not betting on one lab either: after a six-model February push, it carries more than a dozen Chinese open-weight models from DeepSeek, Qwen, MiniMax and Kimi ¹. Amazon is building the toll booth on all of them, and Zhipu has cut similar deals with Alibaba Cloud and Huawei Cloud ².

Anthropic flagged this exact model five days earlier

Anthropic's own assessment, published September 29↗, found GLM-5.3 completed 50 of 410 end-to-end cyber exploits against Claude Mythos Preview's 56, while attackers bypassed its safeguards 63% to 100% of the time; the bypasses never worked against safeguarded Claude models ⁴. The US Center for AI Standards and Innovation called it the most cyber-capable open-weight model released to date ⁵. Z.ai pushed back, saying the model had helped defend 389 open-source projects ⁵.

One investor, two positions

Amazon holds roughly 20% of Anthropic, carried at $190.4 billion on its balance sheet at mid-year↗, with Anthropic committed to over $100 billion in AWS spending over a decade and more than 100,000 customers accessing Claude through Bedrock ⁶. So the company that published the warning on GLM-5.3's weak safeguards is, through AWS, the checkout page for it ⁴⁶.

Anthropic targets a $2 trillion IPO while Amazon, with no in-house frontier model of its own, has its equity, cloud revenue and chip credibility tied to the same lab ⁶⁸. The containment camp and the toll-booth camp cannot both be right about what that franchise is worth. Meanwhile Zhipu is shopping a $2.2 billion Shanghai STAR follow-on above 1,200 times trailing earnings, after a roughly 2,400% run since its January debut ¹. Neither the dilution nor the policy risk appears on an Amazon invoice. Both land on somebody's balance sheet.