OpenAI open-sources Codex Security CLI to help developers find and fix vulnerabilities from the command line
By Matthias Bastian
AI 摘要
OpenAI has released Codex Security CLI, an open-source tool that automatically detects and fixes vulnerabilities in code repositories. Previously known internally as "Aardvark," the system has already helped fix more than 3,000 critical security flaws, according to OpenAI. It competes directly with
原文正文
OpenAI open-sources Codex Security CLI to help developers find and fix vulnerabilities from the command line
OpenAI has released Codex Security CLI. The open-source command-line tool, licensed under Apache 2.0, helps security and development teams automatically find, confirm, and fix vulnerabilities in code repositories. Codex Security CLI can scan repositories, compare results across multiple runs, verify fixes, and plug security checks into CI/CD pipelines. Bulk scans across multiple repositories are also supported. The tool requires Node.js 22 and Python 3.10 or higher, is currently in beta, and installs via npm. The documentation covers all commands and output formats.
Codex Security was previously known internally as "Aardvark" and launched in March 2026 as a research preview for ChatGPT Enterprise, Business, and Edu customers. By April 2026, the system had helped fix more than 3,000 critical vulnerabilities, according to OpenAI. Codex Security competes directly with Anthropic's Claude Security, which also scans codebases for vulnerabilities and suggests patches. Both tools reflect a growing reality: as AI models give attackers more automated capabilities, defenders need to keep up.
AI News Without the Hype – Curated by Humans
Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.
Subscribe now