Security55 mOctober 9, 2026, 17:06

OpenAI releases Codex Security, an agent-driven vulnerability scanner

OpenAI open-sourced Codex Security, a TypeScript SDK for agent-driven vulnerability scanning. Its pipeline of discovery, validation, patch and verification agents scans code in parallel, filters false positives, generates patches and tests them. It requires Node.js 22.13+ and Python 3.10+.

DEV Community

Open source

OpenAI releases Codex Security, an agent-driven vulnerability scanner

The TypeScript SDK has already passed 11,000 stars on GitHub
Discovery workers scan the repository in parallel and deduplicate findings
The patch agent proposes diffs but never commits them without human review
Findings export to SARIF, JSON/CSV and Linear issues

#OpenAI#Codex

SecFoo: AI security scanner invented vulnerabilities without seeing code

Security

Anthropic launches OSS Scanner, a free vulnerability scanner for open-source

Security

Stave scanner finds 47 security issues in default S3 configs of Mastodon, Discourse and Chatwoot

Security

OpenAI releases Codex Security, an agent-driven vulnerability scanner

SecFoo: AI security scanner invented vulnerabilities without seeing code

Anthropic launches OSS Scanner, a free vulnerability scanner for open-source

Stave scanner finds 47 security issues in default S3 configs of Mastodon, Discourse and Chatwoot

Legit Security extends automated fixes to vulnerable open-source dependencies