OpenAI Codex Security: CLI and TypeScript SDK for Code Audits

Repositoryopenai/codex-securityTool

Codex Security is an open-source tool and TypeScript SDK from OpenAI designed to detect, validate, and remediate security vulnerabilities in source code.

Key points

  1. Provides both a command-line interface (CLI) and a TypeScript SDK for automated security scans.
  2. System requirements specify Node.js 22.13.0 or later and Python 3.10 or later.
  3. Supports CI integration via the OPENAI_API_KEY environment variable.
  4. Includes a preview findings service that uses SQLite and embeddings for deduplication alongside a local web dashboard.
  5. Supports custom severity classification through Markdown rubrics and containerised bulk scanning with Docker Compose.

Why it matters

The tool bridges automated vulnerability scanning with model-driven validation and remediation, allowing teams to embed AI-assisted code reviews directly into DevSecOps workflows.

Analysis

The project targets software engineers and DevSecOps practitioners looking for automated security reviews. Built in TypeScript and supported by Python and SQLite, it offers both local CLI execution and multi-repository Docker Compose setups. OpenAI restricts certain sensitive cybersecurity capabilities to its 'Trusted Access for Cyber' program. With over 10,000 GitHub stars and an Apache 2.0 licence, it has gathered substantial community adoption despite parts of the findings management backend remaining in preview.

Mentioned links

Found in

Summary generated by AI (Gemini 3.8 Flash, 27 September 2026). It may contain errors – the original source is authoritative.

Related entries

Similar in content, found by the AI search.

  • X post:Tibo

    OpenAI Releases Codex Security CLI and TypeScript SDK

    OpenAI has open-sourced Codex Security, a tool designed to discover, validate, and remediate vulnerabilities in codebases. It provides a CLI, a TypeScript SDK, and support for multiple model providers.

    5.6kbookmarks736.6kviews

    AI & LLMs· Tool

  • X post:Mario Zechner

    OpenAI Releases Codex Security CLI and TypeScript SDK

    Mario Zechner highlighted the open-source repository openai/codex-security, a CLI and TypeScript SDK developed by OpenAI to detect, validate, and remediate security vulnerabilities in codebases.

    94bookmarks10.6kviews

    AI & LLMs· Tool

  • Repository:bex-co/bex-security

    Bex Security: Agent-Agnostic AI Security Scanner

    Bex Security is an open-source, upstream-first fork of OpenAI Codex Security that brings vulnerability detection, validation, and remediation to multiple coding agents via the Agent Client Protocol (ACP).

    51starsTypeScript

    AI & LLMs· Tool

  • Repository:openai/codex

    OpenAI Codex CLI: Local Terminal Coding Agent Built in Rust

    Codex CLI is an open-source, lightweight coding agent developed by OpenAI that runs locally in your terminal. Written in Rust, it connects directly to ChatGPT plans or standard API keys.

    121.7kstarsRust

    AI & LLMs· Tool

  • Repository:affaan-m/agentshield

    AgentShield: Security Auditor for Claude Code and MCP Configurations

    AgentShield is an open-source TypeScript security scanner designed for AI agent setups. It inspects `.claude/` directories to detect hardcoded secrets, unverified MCP servers, hook injection vulnerabilities, and tool permission misconfigurations.

    1.2kstarsTypeScript

    AI & LLMs· Tool

Back to the knowledge base

Let's talk about your project

Get in touch

Locations

  • Mattersburg
    Johann Nepomuk Bergerstraße 7/2/14
    7210 Mattersburg, Austria
  • Vienna
    Ungargasse 64-66/3/404
    1030 Wien, Austria

Parts of this content were created with the assistance of AI.