OpenAI open-sources Codex Security CLI to help developers find and fix vulnerabilities from the command line
Quick Answer
OpenAI has launched the open-source Codex Security CLI, a command-line tool for developers to identify and fix vulnerabilities in code repositories.
Quick Take
This tool, currently in beta, supports bulk scans, CI/CD integration, and requires Node.js 22 and Python 3.10 or higher. It has already helped fix over 3,000 critical vulnerabilities since its preview release in March 2026.
Key Points
- Codex Security CLI is licensed under Apache 2.0 and available via npm.
- The tool can scan multiple repositories and verify fixes across runs.
- It was previously known as 'Aardvark' and launched in March 2026.
- Codex Security has already fixed over 3,000 critical vulnerabilities.
- It competes with Anthropic's Claude Security in the vulnerability scanning space.
Source Excerpt
OpenAI has released Codex Security CLI, an open-source tool that automatically detects and fixes vulnerabilities in code repositories. Previously known internally as "Aardvark," the system has already helped fix more than 3,000 critical security flaws, according to OpenAI. It competes directly with Anthropic's Claude Security, as both AI companies race to match the growing automation of cyberattacks with AI-powered defense.
Want this in your inbox every morning?
Daily brief at your local 8am — bilingual EN/中文, free.
More from The Decoder
See more →
An AI model programmed nonstop for 19 days on a single MirrorCode task that cost $2,600 to run
Epoch AI's MirrorCode benchmark reveals Claude Opus 4.7 as the leader with a 56% solve rate, reconstructing a 16,000-line toolkit in 14 hours. Despite this, all models tested struggle with the most complex tasks, highlighting limitations in current AI capabilities. The single task consumed $2,600 over 19 days, raising questions about cost-effectiveness in AI development.
