Plain-AyI
← All projects
Coding assistants

Codex Security

OpenAI's tool that scans your code for security weaknesses, checks them and suggests fixes.

New this week

What it does

Codex Security is a command-line tool and code library from OpenAI that looks for security vulnerabilities, meaning weaknesses an attacker could exploit, in a codebase.

It can scan a whole project or just recent changes, double-check suspected problems, write patches, and draft a security policy for the project. Results can be exported to common report formats or sent to issue trackers.

You sign in with an OpenAI account to use it. The README notes some cybersecurity features need extra approval from OpenAI.

Who it's for

Software developers and security teams who want AI help reviewing their own code for vulnerabilities.

Can I use it without coding?

Developers only. It is installed with Node.js and run from the command line inside a code project. New to this? Start here.

Can I run it?

Cost
Free, but needs an AI accountThe software is free, but it uses an online AI service (like OpenAI or Anthropic), which usually charges for use.
Runs on
Mac, Windows, Linux
Computer
An ordinary computer is fine
Privacy
Sends what you give it to an online service
API key
Not needed

Try it

Using Claude Code, Cursor or another AI coding assistant? Paste the prompt and it will walk you through the setup.New to this?

Before you install

  • Only download from the official GitHub page. Copies with similar names exist for many popular projects.
  • License (Apache-2.0): Permissive: free to use, change and share, including for business.
  • What you type or upload is sent to an online service. Avoid sharing private or sensitive information.
  • More on staying safe

Where people are talking about it