Codex Security Plugin
A plugin for OpenAI's Codex coding tool that scans your code for security vulnerabilities and helps fix them.

Details
- Install it inside Codex (desktop app or command line), point it at a project folder, and it runs a security scan of that code
- It finds vulnerabilities, checks whether each one is real, and can apply fixes, aiming to stop issues before they reach production
- Launched alongside the full release of GPT-5.5-Cyber, OpenAI's security-tuned model, which stays limited to vetted defenders
- Part of OpenAI's Daybreak cybersecurity program
Best for
finding and fixing security holes in code you are already working on, without leaving Codex
When to use it
you want to scan a codebase for vulnerabilities before shipping, from your editor or the command line
Who benefits
developers and security teams who use OpenAI's Codex
Join the newsletter to get ahead with AI.
I share strategies, new modules, free guides, and tools to get you better at using AI in your work.
Leading a team? See team programs →
