OPENAI COURTS OSS MAINTAINERS: FREE CODEX/CHATGPT ACCESS, CODEX SECURITY PREVIEW, AND A REPORTED PROMPTFOO BUY
OpenAI is pushing into open‑source maintenance and AI security with a support program, a new Codex Security agent, and a reported Promptfoo acquisition. OpenAI...
OpenAI is pushing into open‑source maintenance and AI security with a support program, a new Codex Security agent, and a reported Promptfoo acquisition.
OpenAI launched a Codex for Open Source program to give qualifying maintainers free ChatGPT Pro and Codex access, plus selective access to Codex Security for high‑impact projects, with details on the program page and coverage by MLQ.ai (program, news).
Codex Security is now in research preview and free for a month to ChatGPT Pro, Enterprise, Business, and Edu users via Codex web, focusing on high‑confidence findings and fewer false positives TechRadar. MLQ.ai reports it’s powered by GPT‑5.4 and being piloted on projects like vLLM news.
Separately, multiple outlets say OpenAI acquired Promptfoo, an open‑source AI red‑teaming and testing platform, signaling a deeper bet on AI security tooling (WebProNews, The AI Report). For OSS upkeep patterns, OpenAI also outlines using "skills" in its Agents SDK to accelerate maintenance blog.
Teams can offload code maintenance and tighten security triage with subsidized AI and a higher‑signal vuln agent.
If Promptfoo joins the stack, OpenAI’s ecosystem may shape how enterprises standardize AI security testing.
-
terminal
Run Codex Security on a repo with known CVEs; compare precision and mean‑time‑to‑remediate vs. your SAST/DAST baseline.
-
terminal
Shadow a sprint using Codex code generation; track PR throughput, review time, and post‑merge defects.
Legacy codebase integration strategies...
- 01.
Pilot Codex Security in CI on a low‑risk service; start with high‑confidence findings only and human‑gated autofix PRs.
- 02.
Clarify repo access and data handling; use read‑only tokens and allowlists before granting wider org access.
Fresh architecture paradigms...
- 01.
Design pipelines to run AI security agents pre‑merge and on nightly scans; budget for model and validation costs.
- 02.
Standardize agent "skills" for common upkeep tasks so new services inherit automation from day one.