
OpenAI Codex Security: The AI Agent That Found 10,561 Vulnerabilities in 30 Days
OpenAI launched Codex Security as a research preview on March 6, 2026. In its first 30 days, the agent scanned 1.2 million commits across open-source projects like OpenSSH, Chromium, GnuTLS, and PHP, identifying 10,561 high-severity vulnerabilities and earning 14 CVE assignments. It evolved from Aardvark, OpenAI’s private-beta security agent from October 2025. The numbers are impressive, but the tool still lacks CI/CD integration, IDE support, and independent audit.








