What is Codex Security?
Threat models, history scans and validated vulnerabilities from OpenAI Codex.
Who is Codex Security best for?
Codex Security is best for security teams who want likely vulnerabilities in their repos found, reproduced and given a fix.
Security teams buried in alerts
It builds a threat model for each repository and tries to reproduce likely bugs in an isolated container, so the findings you review come with evidence.
Security checks on pull requests
Security Review reads each pull request's diff against the repo's threat model, and the CLI can fail a CI job when it finds an issue above a set severity.
Teams that already work in Codex
Scans, findings and proposed patches sit in a Security view in the ChatGPT desktop app and the Codex CLI, next to the rest of your coding work.
Adding depth to existing scanners
OpenAI positions it next to rule-based SAST tools, adding reasoning about how code actually runs rather than replacing broad coverage.
How much does Codex Security cost?
Codex Security has no separate price: OpenAI offers it as a research preview on ChatGPT Business ($25 per user a month), Pro (from $100 a month), Enterprise and Edu, and not on Plus.
- For 2 or more users
- Shared workspace with SAML SSO and admin controls
- No training on your business data by default
- 5x or 20x the Codex usage of Plus
- Everything in Plus
- Priority request processing
- SCIM, RBAC and audit logs through the Compliance API
- Data retention and data residency controls
Business is $20 per user a month when billed yearly. Codex Security is in research preview and has to be switched on for your account or workspace; OpenAI lists it for Pro, Business, Edu and Enterprise but not Plus. Scans run as Codex tasks on your ChatGPT sign-in, or the Codex Security CLI can bill them to an OpenAI API key at API rates, with an estimated cost cap you set per scan. Full pricing on learn.chatgpt.com. We checked these prices on .
How do readers rate Codex Security?
No one has rated Codex Security yet. Be the first.
Sign in to rate. One rating per account.
What are the best Codex Security alternatives?
Two tools on Recaply do Codex Security's job.
Questions about Codex Security
What is Codex Security?
Threat models, history scans and validated vulnerabilities from OpenAI Codex.
Who is Codex Security for?
Codex Security is best for security teams who want likely vulnerabilities in their repos found, reproduced and given a fix.
Is Codex Security free?
No. Codex Security is a paid tool, from $25 per user per month.
How much does Codex Security cost?
Codex Security's paid plans are Business at $25 per user per month and Pro at From $100 per month.
What are the best Codex Security alternatives?
The closest alternatives on Recaply are Claude Security and ZeroPath.
Where can I try Codex Security?
On its official website, openai.com.
Does Codex Security fix vulnerabilities automatically?
No. Codex Security proposes a patch for each finding it can fix, and a person reviews it and opens the pull request from the findings view. It never changes the repository on its own, and a fix is only a suggestion until someone applies it.
How long does a Codex Security scan take?
The first Codex Security scan of a repository can take several hours, or several days for large ones, depending on size, build time and how many findings go to validation. Later scans are faster because they focus on new commits.
Pixee
OpenAI Daybreak
Superagent
DryRun Security
Infisical
Mobb