Security teams on GitHub with ChatGPT Pro or business plans can try it in research preview, but token rates aren't published.

Kenning's take

What it does

Codex Security connects to GitHub repositories, builds a threat model of the code and scans the full repository or new commits for vulnerabilities. It tries to confirm each finding in an isolated environment and suggests patches for the team to review. It is a research preview for ChatGPT Pro, Business, Enterprise and Edu users.

  • Editable threat model per repository
  • Full-repository and commit scans
  • Validates findings in an isolated environment
  • Proposed patches for review
  • Role-based access controls for Enterprise and Edu

Who it suits. Security and engineering teams who want automated vulnerability review of their code.

Key facts

Part of
ChatGPT
Made by
OpenAI
Released
6 March 2026
How to get it
Research preview for ChatGPT Pro, Business, Enterprise and Edu users through Codex on the web; GitHub repositories only
Works on
Web
API price
Token-based billing for Codex Security Cloud; rates not published on the help page

Pricing

PlanPriceBilled
ChatGPT Pro$100month (lowest Pro tier)
ChatGPT Business$20user per month, billed annually

source

FAQ

When did Codex Security launch?

OpenAI opened Codex Security as a research preview on 6 March 2026.

Who can use Codex Security?

ChatGPT Pro, Business, Enterprise and Edu users, through Codex on the web with GitHub repositories.

Is Codex Security free?

No. It needs one of those paid ChatGPT plans, and Codex Security Cloud uses token-based billing once a customer opts in.

Facts from the maker's own pages and the sources listed. Checked 2026-10-11.