APPSEC

OpenAI released the Codex Security CLI and TypeScript SDK as open source on GitHub. The Promptfoo team behind it, the 2.1k-star reception, and what the HN community says about cost, guardrails, and local model support.

OpenAI's Daybreak and Patch the Planet point at the real agentic AppSec shift: security agents only matter when they produce validated, reviewable patches maintainers can actually merge.

OpenAI's Codex Security agent reviews app code for vulns. Here is what it caught and missed on three real production repos.