OpenAI releases open‑source Codex Security CLI, but core scanner stays gated

Key Points

• OpenAI released the Codex Security CLI under an open licence, allowing free download and integration.
• The CLI scans code repositories, validates vulnerabilities and proposes fixes, but requires human approval for patches.
• Access to the underlying AI scanner remains restricted to a limited beta for approved customers.
• Internal figures claim the tool helped fix over 3,000 critical vulnerabilities since its March preview.
• The release puts OpenAI in direct competition with security vendors such as Snyk, Semgrep, Veracode, and GitHub.
• Rival AI companies Anthropic and Microsoft have launched similar code‑security services.
• Recent incidents involving OpenAI models highlight growing concerns about AI‑generated code flaws.
• OpenAI’s move is seen as both a market expansion and a response to security criticisms of its own ecosystem.