Codex Security
Runs security scans and triage on your code repository and diffs, with fixes and hardening suggestions.
What Codex Security can do in ChatGPT
Find, judge and fix security problems in code.
Deep Repository Scan
Check a whole codebase for security weaknesses.
Diff Scan
Scan a pull request, commit or uncommitted patch on its own.
Finding Triage
Check existing findings against the repo and sort real ones.
Attack Path Analysis
Map how an attacker could move through the code.
Fixes And Hardening
Fix a finding or get suggestions to harden the code.
You stay in control
You approve access, and you can disconnect Codex Security at any time.
Apps 8
What Codex Security does in ChatGPT
The Codex Security plugin bundles ready workflows for checking code for security problems. You can point it at a whole repository for a deep scan, or at a smaller change such as a pull request, a commit, a branch comparison or uncommitted edits, and it looks for weaknesses in what changed.
It also helps with the work after a scan. Its skills cover judging how risky a patch is, mapping how an attacker could get in, writing a security policy, fixing a specific finding and suggesting ways to harden the code. You can also ask it to go through findings you already have and check them against the repo.
The listing marks it as desktop only. It runs a local MCP server and comes with GitHub, Linear and Atlassian apps, which cover repositories and pull requests, issue planning, and Jira and Confluence. Its capabilities are listed as interactive, read and write.
Built-in skills
The listing says Codex Security comes with 8 named skills plus 7 more. Skills are ready-made instructions ChatGPT can use for a specific job.
- Assess Patch Risk
- Attack Path Analysis
- Deep Security Scan
- Define Security Policy
- Finding Discovery
- Fix Security Finding
- Propose Security Hardening
- Security Diff Scan
Who it is for
- Developers reviewing their own pull requests
- Security engineers triaging findings
- Teams adding security checks to code review
How to add Codex Security to ChatGPT
- Open the Codex Security listing in ChatGPT ↗.
- Click Install plugin.
- Sign in to your Codex Security account when asked and approve the access it requests.
- Start a chat and ask for what you need, mentioning Codex Security if ChatGPT does not pick it up.
- To stop, disconnect Codex Security under apps in your ChatGPT settings.
Questions about Codex Security
What is the Codex Security ChatGPT plugin?
The Codex Security plugin bundles ready workflows for checking code for security problems. You can point it at a whole repository for a deep scan, or at a smaller change such as a pull request, a commit, a branch comparison or uncommitted edits, and it looks for weaknesses in what changed. It is listed in ChatGPT's plugin marketplace under Security.
What can I ask Codex Security to do in ChatGPT?
For example: "Run a Codex Security scan on this repository", "Run a security diff scan on this pull request", "Triage the existing security findings against this repo". It also comes with built-in skills such as Assess Patch Risk, Attack Path Analysis and Deep Security Scan.
Who makes the Codex Security plugin for ChatGPT?
The ChatGPT listing names OpenAI as the developer. The version listed on 8 October 2026 was 0.1.32.
How do I add Codex Security to ChatGPT?
Open the Codex Security listing in ChatGPT, click Install plugin, sign in to your Codex Security account and approve the access it asks for. Then ask for what you need in a chat, mentioning Codex Security if ChatGPT does not pick it up.
Can Codex Security change things in my account, or only read?
It reads your repository, diffs and existing findings, and can write changes such as fixes. It works with GitHub, Linear and Atlassian through their apps.
Who is the Codex Security plugin for?
Developers reviewing their own pull requests, security engineers triaging findings and teams adding security checks to code review.
Can I scan only my latest changes?
Yes. The diff scan works on a pull request, a commit, a branch comparison or a working-tree patch instead of the whole repository.
Does Codex Security work on the web?
The listing marks it as desktop only and runs it through a local MCP server.
Does Codex Security see my ChatGPT chats?
When Codex Security is connected, ChatGPT may share the parts of your chats and memories that matter for a request with Codex Security. What Codex Security does with that data falls under its own terms and privacy policy. ChatGPT keeps your training-data settings, and you can disconnect at any time.
How do I disconnect Codex Security from ChatGPT?
Open your ChatGPT settings, go to apps, and disconnect Codex Security. You can reconnect later from the listing.
What are alternatives to Codex Security in ChatGPT?
Similar plugins in the ChatGPT marketplace include Orca Security, Above Security and Bastion. Each has its own page in this directory.
Privacy and your data
When Codex Security is connected, ChatGPT may share the parts of your chats and memories that matter for a request with Codex Security. What Codex Security then does with that data falls under its own terms and privacy policy, not only OpenAI's. ChatGPT keeps your training-data settings for data that comes from connected apps, and you can disconnect at any time.
Codex Security privacy policy ↗Codex Security terms ↗OpenAI: apps in ChatGPT ↗