by OpenAI
Codex Security review, pricing and verdict
OpenAI's security agent that scans repos and drafts fixes.
- Best for
- Application security engineers triaging a growing vulnerability backlog
- Not for
- Team without GitHub repositories
Should you use Codex Security?
Best for security engineers and small teams who want a validated first pass over a repository and its new commits without running scanners by hand. It supplements static analysis rather than replacing it, and a person still approves every patch. Expect a setup step for GitHub and a Codex cloud environment.
Sandbox reproduction of each suspected vulnerability before a person sees it, with the evidence attached.
Distribution through ChatGPT plans, Codex cloud, and the Daybreak program gives OpenAI reach, but application security is a crowded field with established scanners and the cloud product is still a research preview.
Also for
- Engineering leads who want a validated first pass over new commits
- Open-source maintainers who need fewer unvalidated security reports
Show 2 more
- DevOps engineers adding security checks to pull request pipelines
- Engineering lead at a GitHub-based team
Also not for
- Compliance officer needing a certified static analysis report
Main trade-off
Research-preview status and a multi-step setup, with no published per-scan price or duration.
Codex Security pricing
- Billing model
- Subscription
OpenAI lists no separate price for Codex Security at the time of review. Access to Codex Security Cloud is included with four ChatGPT plan types (see the vendor announcement), and it runs scans in Codex cloud, so it needs a workspace with Codex cloud set up. Command-line and SDK users can cap estimated spend for a scan. Running scans requires Codex Security access, and OpenAI recommends an account verified for Trusted Access for Cyber for best results. Check the plan page in ChatGPT for current plan prices.
Before you commit
- Scans run in Codex cloud, so they depend on a configured Codex cloud environment and plan usage
- Best results call for a Trusted Access for Cyber verified account
What Codex Security does on its own
- Scope of autonomy
- Semi-autonomous
- Human approval boundary
- Human in the loop
- Maturity
- Beta
Safety controls
- Runs sandboxedSupported
- Audit loggingSupported
- Human in the loopSupported
What it can operate
- Code execution
- File system
- Shell commands
- API calls
- Document reading
Where Codex Security runs
- Deployment
- Cloud · Local
- Where it runs
- Web · Desktop · CLI · API
- Memory
- Long term
Models it runs on
- Models offered through OpenAI Daybreak Blue
Systems it connects to
| System | Type |
|---|---|
| GitHub | Native |
| ChatGPT | Native |
| OpenAI Codex | Native |
| SARIF upload | API |
| TypeScript SDK | API |
What Codex Security does
OpenAI launched Codex Security on September 29, 2026, an agent that hunts vulnerabilities in code. The cloud version reads GitHub repositories once or on a recurring schedule, watches new commits, reproduces likely flaws in an isolated container, and drafts fixes for review. It is a research preview for Pro, Business, Enterprise, and Edu users.
Repository and commit scans
Scans a whole GitHub repository once, or monitors new commits and can review existing commit history, with monitoring pausable per repository.
Threat model per repository
Builds an editable threat model of entry points, trust boundaries, and risky components that steers what gets scanned and how findings are ranked.
Sandbox validation
Tries to reproduce each likely vulnerability in a clean isolated container and marks the ones that reproduce as validated, attaching logs and commands as evidence.
Proposed patches
Offers Fix with Codex on findings that support it, producing a minimal diff you review before creating a draft pull request.
Show all 6 features
CLI, CI, and SDK
The @openai/codex-security package runs local and bulk scans, checks pull requests in CI, uploads SARIF, and exposes a TypeScript SDK.
Daybreak Blue models included
The cloud plugin bundles Daybreak Blue model access, so defenders skip the separate Daybreak application step.
Strengths and limits
Strengths
- Tries to reproduce each suspected issue in a clean container first, so validated findings arrive with logs and commands rather than a bare warning.
- Runs in Codex cloud on a schedule or on new commits, so scans continue while your laptop is closed.
- Never applies a patch on its own: a proposed fix waits behind a draft pull request that a person has to create.
- Ships as a cloud plugin, a local plugin, a CLI, and a TypeScript SDK, so one scanner covers desktop, terminal, and CI use.
Limits
- The cloud plugin is a research preview and needs a Codex cloud environment plus a GitHub connection, so setup is longer than a single-click install.
- OpenAI says it complements static analysis and does not replace manual review, so you still need existing scanners and a human in the loop.
- Scan time varies with repository size and validation work, and OpenAI gives no fixed duration or per-scan cost.
- Running scans needs Codex Security access, and OpenAI recommends a Trusted Access for Cyber verified account for best results.
Codex Security alternatives
| Agent | Where it runs | Price | Maturity | Checked |
|---|---|---|---|---|
| Codex Security This page | Cloud · Your machine | -- | Beta | 30 Sep |
 OpenAI CodexPick Codex for writing and reviewing everyday code changes; pick Codex Security when the job is finding and validating vulnerabilities. | Cloud · Your machine · API | Free plan | Enterprise | 6 Nov |
 Claude CodePick Claude Code as a general terminal coding agent; pick Codex Security for scheduled repository scanning with sandbox validation. | -- | -- | -- | -- |
 JulesPick Jules for asynchronous coding tasks on your repos; pick Codex Security for a ranked, validated list of security issues. | Cloud · API | Free plan | Available | 25 Oct |
Codex Security facts
- Works offline
- No
- Minimum skill level
- Intermediate
- Budget fit
- Mid
- Open source
- No
- Ships
- Weekly
- Last major update
- Maker founded
- 2015
- Headquarters
- San Francisco, California
- Team size
- 9,000-10,000
- Total funding
- $138.4B total, most recently a $122B round anchored by Amazon, Nvidia, and SoftBank
What changed
- Release Codex Security Cloud announced at DevDay 2026 source
Questions about Codex Security
Does Codex Security have its own price?
OpenAI's documentation and DevDay recap list no separate price for Codex Security. Codex Security Cloud is offered to ChatGPT Pro, Business, Enterprise, and Edu users, so it appears to be covered by the plan you already hold. The only spending control OpenAI describes is an estimated cost limit you can set when scanning from the CLI or SDK.
Can Codex Security replace our existing scanners?
According to OpenAI it sits alongside static analysis instead of taking its place, because deterministic scanners still give broad coverage. It adds model-based reasoning and an attempt to reproduce each finding in a sandbox. It also states that it does not replace manual security review or human threat assessment.
What else could you use for security-minded code work?
Claude Code and Jules are general coding agents that write and change code, so they suit fixing what a scan reports rather than producing the scan itself. GitHub Copilot fits teams already standardised on GitHub tooling for everyday coding. None of the three is described here as a validated vulnerability scanner, so check each vendor's security documentation before relying on it.
How does Codex Security relate to OpenAI Codex?
Codex Security runs on the Codex platform: the cloud version runs scans in Codex cloud, and the local plugin runs each scan as a Codex task in the desktop app or CLI. Codex is the general coding agent, while Codex Security is a purpose-built scanner with a threat model, validation stage, and findings list.
How do you run a first scan?
Open Plugins in ChatGPT on the web or desktop, install Codex Security Cloud, and select New scan. Connect GitHub if prompted, pick the repository and a Codex cloud environment, choose Repository under What to scan, then start the scan. For a local scan, run npx @openai/codex-security --help and follow the CLI quickstart.
About Codex Security
OpenAI introduced Codex Security at DevDay on September 29, 2026, next to the wider OpenAI Codex updates. OpenAI describes it as a tool that helps security and engineering teams find, confirm, and fix vulnerabilities. The cloud version reads whole GitHub repositories when asked or at set intervals, keeps checking new commits, investigates what it finds, removes duplicates, and prepares fixes in the cloud even with your laptop closed. That plan-act-verify loop is what makes it an agent rather than a code linter that prints a list.
Read the full background
Each scan follows four stages in OpenAI's documentation. Codex builds a threat model of the repository, scans it once or watches commit changes, tries to reproduce likely vulnerabilities in an isolated container to cut false positives, and then proposes a minimal patch. Findings arrive ranked by criticality with the validation evidence attached. Nothing is applied automatically: a proposed patch becomes a draft pull request only after you select it. OpenAI says the tool complements static analysis rather than replacing it, and it does not replace human review.
There are two ways to run it. Codex Security Cloud is a plugin for ChatGPT on the web and in the desktop app, currently a research preview, that needs a connected GitHub repository and a Codex cloud environment. A separate local plugin, plus a public CLI and TypeScript SDK published as @openai/codex-security, covers terminal scans, CI checks on pull requests, and bulk scans across many repositories. The cloud version includes access to models offered through Daybreak Blue, so you do not file a separate Daybreak application. That differs from GPT-5.6-Cyber, which sits in the separate Daybreak Red tier for vetted partners.
Availability covers Pro, Business, Enterprise, and Edu plans on desktop and web. OpenAI did not publish a separate Codex Security price at review time, so it appears to ride on the plan you already pay for. It suits AppSec engineers and small teams that want a validated first pass over a codebase. Teams that mainly need a general coding assistant should compare GitHub Copilot, Claude Code, and Jules, and OpenAI's own dots and ChatGPT Work cover different jobs. The vendor behind all of these is OpenAI.
Sources and guides
Official sources
- Codex Security official site Vendor
- GitHub repository GitHub
Autonomy, guardrails, integrations and pricing on this page are read from OpenAI's own documentation. The verdict is Hokai's reading of them, not the vendor's claim.
Hokai guides that mention Codex Security
Lists that include Codex Security
More AI Agents on Hokai
CosineCoding agent for CLI, desktop and cloud, with air-gapped Lumen models.LetterCoding agent that turns site and market signals into pull requests
Muse CodeMeta's multi-agent CLI that plans, codes, and validates changes across repos.RopilotA desktop agent that writes Luau into Roblox Studio and playtests it
OpenHandsOpen-source AI agent that plans, codes, tests, and ships pull requestsPromptlessAI teammate that drafts doc updates as pull requests when you ship.