OpenAI Releases Codex Security CLI and TypeScript SDK

X postMario ZechnerTool

Mario Zechner highlighted the open-source repository openai/codex-security, a CLI and TypeScript SDK developed by OpenAI to detect, validate, and remediate security vulnerabilities in codebases.

Key points

  1. Codex Security (@openai/codex-security) is designed to find, validate, and patch security issues in source code.
  2. System requirements specify Node.js 22.13.0 or later and Python 3.10 or later.
  3. Offers a CLI for repository audits and a TypeScript SDK for programmatic integration and CI workflows.
  4. Includes a local findings service storing issues and embeddings in SQLite, featuring deduplication and a web dashboard.
  5. Supports third-party inference providers alongside OpenAI, including Amazon Bedrock, OpenRouter, and Fireworks.
  6. Certain cybersecurity capabilities and protected findings require approval through the Trusted Access for Cyber programme.

Why it matters

Automated code auditing is moving deeper into continuous integration workflows. Providing both a CLI and an SDK alongside multi-provider support simplifies the adoption of LLM-assisted vulnerability scanning.

Analysis

By pairing automated scanning with validation, automated remediation suggestions, and embedding-based deduplication, the tool addresses common pain points of security noise. Its native support for alternative model providers also prevents vendor lock-in for enterprise security pipelines.

Original post

Mario Zechner

@badlogicgames · 29 July 2026

neat t.co/IvnYwsOzg4

100 likes1 replies94 bookmarks10.6k views

View on X

Mentioned links

Links and tools from this entry

Summary generated by AI (Gemini 3.8 Flash, 27 September 2026). It may contain errors – the original source is authoritative.

Related entries

Similar in content, found by the AI search.

  • X post:Tibo

    OpenAI Releases Codex Security CLI and TypeScript SDK

    OpenAI has open-sourced Codex Security, a tool designed to discover, validate, and remediate vulnerabilities in codebases. It provides a CLI, a TypeScript SDK, and support for multiple model providers.

    5.6kbookmarks736.6kviews

    AI & LLMs· Tool

  • Repository:bex-co/bex-security

    Bex Security: Agent-Agnostic AI Security Scanner

    Bex Security is an open-source, upstream-first fork of OpenAI Codex Security that brings vulnerability detection, validation, and remediation to multiple coding agents via the Agent Client Protocol (ACP).

    51starsTypeScript

    AI & LLMs· Tool

  • Repository:openai/codex

    OpenAI Codex CLI: Local Terminal Coding Agent Built in Rust

    Codex CLI is an open-source, lightweight coding agent developed by OpenAI that runs locally in your terminal. Written in Rust, it connects directly to ChatGPT plans or standard API keys.

    121.7kstarsRust

    AI & LLMs· Tool

  • Repository:affaan-m/agentshield

    AgentShield: Security Auditor for Claude Code and MCP Configurations

    AgentShield is an open-source TypeScript security scanner designed for AI agent setups. It inspects `.claude/` directories to detect hardcoded secrets, unverified MCP servers, hook injection vulnerabilities, and tool permission misconfigurations.

    1.2kstarsTypeScript

    AI & LLMs· Tool

Back to the knowledge base

Let's talk about your project

Get in touch

Locations

  • Mattersburg
    Johann Nepomuk Bergerstraße 7/2/14
    7210 Mattersburg, Austria
  • Vienna
    Ungargasse 64-66/3/404
    1030 Wien, Austria

Parts of this content were created with the assistance of AI.