{
  "slug": "codex-security",
  "name": "Codex Security (formerly Aardvark)",
  "tagline": "OpenAI's agentic scanner with sandboxed exploit validation",
  "maintainer": "OpenAI",
  "url": "https://openai.com/index/codex-security-now-in-research-preview/",
  "category": "frontier",
  "targets": [
    "General code",
    "Commits and pull requests"
  ],
  "approach": "Builds a project threat model, scans commits, validates exploitability in a sandbox, proposes patches",
  "license": "SaaS for ChatGPT Pro, Business, Enterprise and Edu",
  "status": "Active (research preview 2026-03-06)",
  "since": "2025-10 (Aardvark)",
  "summary": "Codex Security is OpenAI's agentic security scanner, announced as Aardvark in October 2025 with a claimed 92 percent detection rate on benchmark repositories and released as a research preview in March 2026. In its first thirty days it scanned 1.2 million commits, reported 792 critical and 10,561 high findings and 14 CVEs including OpenSSH, GnuTLS and Chromium, and claimed up to 84 percent noise reduction through sandboxed validation.",
  "details": [
    "Sandboxed exploit validation is its distinguishing feature: a finding is confirmed by attempting it. The scale of high-severity findings in the first month is also the clearest illustration of triage burden on this index."
  ],
  "strengths": [
    "Exploit validation before reporting.",
    "CVEs in cryptographic and network libraries (OpenSSH, GnuTLS).",
    "Threat-model construction per project."
  ],
  "limits": [
    "Not cryptography-aware.",
    "Findings volume.",
    "Benchmark claims lack a public dataset."
  ],
  "fit": [
    "Use it on ChatGPT enterprise plans as the implementation-layer scanner, with the same caveat as Claude Security for cryptographic logic."
  ],
  "references": [
    [
      "Introducing Aardvark (2025-10)",
      "https://openai.com/index/introducing-aardvark/"
    ],
    [
      "Codex Security research preview (2026-03-06)",
      "https://openai.com/index/codex-security-now-in-research-preview/"
    ]
  ],
  "category_name": "Frontier-lab and general scanners",
  "page": "https://agentsast.com/tools/codex-security/",
  "updated": "2026-09-13"
}