O

Codex Security

AI agent

by OpenAI

Codex Security is an application security agent that helps teams find, confirm, and fix vulnerabilities.

Find alternatives to Codex Security

What it does

• Threat detection and response

Features 5

• Codex Security CloudScans connected GitHub repositories in Codex cloud or monitors new commits.
• Codex Security pluginScans a local repository in Codex and works through findings interactively.
• Codex Security CLIRuns repeatable terminal scans or adds checks to CI.
• Codex Security SDKRuns scans and handles results inside an application or developer tool.
• Security workbenchKeeps saved scans and findings available for review.

Sources

Pricing

Official documentation · 15 Oct 2026

"billed based on token usage"

Description

Official documentation · 15 Oct 2026

"security agent that helps security and engineering teams find, confirm, and fix vulnerabilities."

What it does

Official documentation · 15 Oct 2026

"find, confirm, and fix vulnerabilities."

Sold within

Official documentation · 15 Oct 2026

"Install the Codex Security plugin, run your first read-only scan, and review the result in Codex."

Name

Official documentation · 15 Oct 2026

"Codex Security is an application"

URL

Official documentation · 15 Oct 2026

"Codex Security is an application"

Deployment

Official documentation · 15 Oct 2026

"Use its plugin on the web"

Interfaces

Official documentation · 18 Oct 2026

Page: 'In the ChatGPT desktop app, select Codex , install Codex Security , and open Security in the sidebar. The Security workbench keeps saved scans and findings available for review. You can also use the plugin in Codex CLI. The Codex Security CLI and SDK are distributed in the public @openai/codex-security package . Scans using OpenAI inference require Codex Security access. See each quickstart for its runtime and authentication requirements. Codex Security Cloud is a separate plugin, available in research preview on the web and in the desktop app'.

Also from OpenAI

• ChatGPT Application

  Assistant for chat, web search, file analysis and image generation, used in the browser and in desktop and mobile apps; developers can build custom in-chat apps for it via the Apps SDK, built on the Model Context Protocol.

• ChatGPT for Word Application

  ChatGPT in a Microsoft Word sidebar: drafts, revises and reorganizes the open document from notes or pasted source text, pulling in context from connected apps like Outlook, SharePoint, Google Workspace and Dropbox.

• ChatGPT for Excel Application

  ChatGPT in the Excel ribbon: builds and edits spreadsheets, formulas and formatting from plain-language requests, answers questions about what is in the workbook, and asks permission before changing it. OpenAI's own page bundles this with a separate ChatGPT for Google Sheets add-in; this record covers the Excel add-in only.

• ChatGPT for PowerPoint Application

  ChatGPT in the PowerPoint ribbon: creates new slides, rewrites and restructures an existing deck, and turns notes, documents or spreadsheets into presentation-ready content while keeping the output editable in PowerPoint.

• OpenAI API Model API

  Hosted API for OpenAI's text, image, audio and embedding models, billed per token.

• ChatGPT Atlas Application

  OpenAI's agentic web browser. Deprecated on 9 August 2026, with its browser-based agentic capabilities moved into ChatGPT and Codex.

• ChatGPT Gov Application

  A version of ChatGPT that US government agencies deploy in their own Microsoft Azure commercial or Azure Government cloud, so the agency manages its own security, privacy and compliance.

• Codex AI agent

  Coding agent that reads, edits and runs a codebase from the terminal, an IDE extension and the ChatGPT web app.

• OpenAI Daybreak Agent platform

  OpenAI's cybersecurity offering, bringing together frontier cyber models, Codex Security and partner workflows to find, validate and fix vulnerabilities, with an access-gated Daybreak Red tier for authorised vulnerability research and red teaming.

• OpenAI Frontier Agent platform

  Enterprise platform for connecting AI agents to systems of record and running them under enterprise identity, access and observability controls.

• Sora Application

  OpenAI's text-to-video product. The web and app experiences were discontinued on 26 April 2026; OpenAI's deprecations page lists the Sora 2 models and Videos API for removal from the API on 24 September 2026, a date now passed.

• dots AI agent

  Always-on personal agents inside ChatGPT, each with its own cloud computer, that learn from feedback and work toward a user's goals around the clock; one is included with Pro and Business Premium.

• ChatGPT Space Application

  Shared workspace in ChatGPT for pages and uploaded files that a user edits together with teammates, ChatGPT and their dot; replaced Library on Pro, Business and Enterprise plans.

Open OpenAI in the directory

Something wrong here? Send a correction — quote this product id: openai-codex-security.