OpenAI open-sources Codex Security to hunt and patch code bugs
OpenAI just open-sourced Codex Security, releasing a CLI and TypeScript SDK built to find, validate, and patch security vulnerabilities in codebases. It supports scanning entire repositories, specific paths, or git diffs, and can automatically generate fix patches with models like gpt-5.6-sol. The tool itself is free, though running scans requires bringing your own OpenAI API key or account login.