OpenAI launches Codex Security Cloud: continuous vulnerability scanning for GitHub repos
OpenAI's new Codex Security Cloud scans connected GitHub repositories for vulnerabilities on demand or on a schedule — investigating findings, removing duplicates, and preparing fixes in the cloud while your laptop stays closed.
What happened
At its DevDay 2026 keynote in San Francisco on September 29, 2026, OpenAI introduced Codex Security Cloud, a companion to Codex aimed at finding and addressing security vulnerabilities in codebases.
How it works
Codex Security Cloud scans entire connected GitHub repositories on demand or on a schedule, investigates findings, merges duplicates, and prepares fixes for review. It also keeps monitoring repositories for new commits so security checks run continuously rather than as periodic audits.
Runs with the laptop closed
Like Codex Cloud, the security workflow runs in OpenAI's cloud environments — it keeps working even when the developer's computer is off.
Availability
Available to Pro, Business, Enterprise, and Education users on desktop and web.
Why it matters
Security scanning becomes always-on infrastructure inside the coding workflow, alongside Codex Cloud tasks and the new code-review experience in the ChatGPT desktop app.
Sources
- https://www.worthview.com/openai-devday-2026-all-the-biggest-announcements-from-dots-and-gpt-6-1-sol-to-the-agents-api/
- https://gadgetbond.com/openai-devday-2026-announcements/
- https://aidailypost.com/news/openai-expands-codex-api-security-scans
- https://windowsforum.com/news/openai-devday-2026-dots-gpt-6-1-sol-codex-and-microsoft-365-admin-impacts.446523/
Verified September 29, 2026.