Security teams on GitHub with ChatGPT Pro or business plans can try it in research preview, but token rates aren't published.
Kenning's take
What it does
Codex Security connects to GitHub repositories, builds a threat model of the code and scans the full repository or new commits for vulnerabilities. It tries to confirm each finding in an isolated environment and suggests patches for the team to review. It is a research preview for ChatGPT Pro, Business, Enterprise and Edu users.
- Editable threat model per repository
- Full-repository and commit scans
- Validates findings in an isolated environment
- Proposed patches for review
- Role-based access controls for Enterprise and Edu
Who it suits. Security and engineering teams who want automated vulnerability review of their code.
Key facts
- Category
- Developer tools
- Part of
- ChatGPT
- Made by
- OpenAI
- Released
- 6 March 2026
- How to get it
- Research preview for ChatGPT Pro, Business, Enterprise and Edu users through Codex on the web; GitHub repositories only
- Works on
- Web
- API price
- Token-based billing for Codex Security Cloud; rates not published on the help page
Pricing
| Plan | Price | Billed |
|---|---|---|
| ChatGPT Pro | $100 | month (lowest Pro tier) |
| ChatGPT Business | $20 | user per month, billed annually |
FAQ
When did Codex Security launch?
OpenAI opened Codex Security as a research preview on 6 March 2026.
Who can use Codex Security?
ChatGPT Pro, Business, Enterprise and Edu users, through Codex on the web with GitHub repositories.
Is Codex Security free?
No. It needs one of those paid ChatGPT plans, and Codex Security Cloud uses token-based billing once a customer opts in.
Facts from the maker's own pages and the sources listed. Checked 2026-10-11.
Similar tools
OpenAI Apps SDK
OpenAI's toolkit for building interactive apps that run inside ChatGPT conversations, based on MCP.
Codex
OpenAI's coding agent that writes, fixes and reviews code from the ChatGPT app, terminal, editor or cloud

Claude Keychain
A free Mac menu bar app that keeps API keys in the macOS Keychain so Claude Code can use them without seeing them.
OpenAI Agent Builder
OpenAI's visual canvas for building multi-agent workflows, being withdrawn on 30 November 2026.