OpenAI Codex Security Can Now Find, Test and Patch Bugs Across Your Code

AI security tools have spent much of their time finding vulnerabilities and handing the resulting list to people. OpenAI's Codex Security is pushing further into the work that follows: investigating whether a suspected flaw is actually exploitable, testing the finding in an isolated environment and generating a patch for engineers to review. "Codex Security investigates potential vulnerabilities, attempts to validate them in an isolated environment, and proposes fixes for your team to review," OpenAI says in its product documentation. The capability itself is not new. OpenAI introduced Codex Security as a research preview in March. What has changed is the push toward running that workflow continuously across connected repositories, with Codex Security Cloud monitoring GitHub code and new commits rather than waiting for a developer to start each scan.