Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Codex Security is an AI-driven application security tool designed to identify vulnerabilities within software projects and provide reliable fixes. Built on OpenAI’s advanced models and the Codex agent framework, the system analyzes code repositories to develop a detailed understanding of a project’s architecture and security posture. It generates a customizable threat model that helps guide the vulnerability detection process. Using this context, Codex Security scans the codebase to identify potential security weaknesses and prioritize them based on their actual risk. The system performs automated validation to verify vulnerabilities and reduce the number of false positives typically produced by traditional security scanners. When issues are confirmed, it generates recommended patches that align with the surrounding code and intended system behavior. This approach helps developers address security problems without introducing unintended regressions. Codex Security also learns from user feedback to improve its detection accuracy over time. The platform is designed to operate at scale and analyze large volumes of commits across repositories. Overall, Codex Security helps development and security teams strengthen application security while reducing manual triage and review workloads.
Description
DryRun Security is an AI Native SAST and Agentic Code Security engine built to improve application security without burying teams in alerts. Traditional SAST flags patterns. DryRun Security adds context. Our proprietary Contextual Security Analysis engine reasons about code intent, exploitability, and impact, so AppSec focuses on what matters.
In pull requests, the Code Review Agent posts PR comments and checks within moments of a push, with guidance developers can act on immediately. It uses specialized analyzers for common vulnerability classes like XSS, SQL injection, SSRF, IDOR, mass assignment, and secrets. For guardrails that match your environment, teams write Natural Language Code Policies in plain English and the Custom Policy Agent enforces them on every PR. When you need a deeper read, DeepScan Agent produces a prioritized full-repo report in about an hour, surfacing complex logic, authentication and authorization flaws, secrets exposure, and business-risk vulnerabilities. Code Insights Agent helps teams see trends across repos and produce audit-ready reporting faster.
DryRun Security is designed for GitHub and GitLab permissioned workflows. It protects security with private LLM capabilities, avoids sending code to public AI systems, processes with ephemeral services, and retains only findings and minimal metadata for reporting.
API Access
Has API
Yes
API Access
Has API
Yes
Integrations
Codex CLI
Yes
GitHub
Yes
OpenAI Codex
Yes
Express
No
GPT-5
Yes
GPT-5-Codex-Mini
Yes
GPT-5.1
Yes
GPT-5.1 Instant
Yes
GPT-5.1 Pro
Yes
GPT-5.2
Yes
Integrations
Codex CLI
Yes
GitHub
Yes
OpenAI Codex
Yes
Express
Yes
GPT-5
No
GPT-5-Codex-Mini
No
GPT-5.1
No
GPT-5.1 Instant
No
GPT-5.1 Pro
No
GPT-5.2
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
OpenAI
Founded
2015
Country
United States
Website
openai.com
Vendor Details
Company Name
DryRun Security
Founded
2023
Country
United States
Website
www.dryrun.security/