Codex Security reviews code for vulnerabilities and reports evidence you can use to investigate and fix them. Choose how to run it based on where your code lives and how you want to review the results.
The Overview in Daybreak Defense Factory shows proposed fixes and tracks open and fixed findings across your repositories.
Choose where to start
| Use | When you want to | Start here |
|---|---|---|
| Daybreak Defense Factory | Scan a GitHub repository, review findings from other tools, and propose fixes with your team. | Set up Daybreak |
| Codex Security plugin | Scan a local repository in Codex and work through findings interactively. | Run your first local scan |
| Codex Security CLI | Run repeatable terminal scans or add checks to CI. | CLI quickstart |
| Codex Security SDK | Run scans and handle results in an application or developer tool. | SDK guide |
Choose the next task
After a local scan, review its scope and findings before deciding what to do next.
| Task | Guide |
|---|---|
| Focus a scan on a service or add security context | Run a security scan |
| Run repeated reviews of the same repository or folder | Run a deep scan |
| Check a pull request, commit, or local diff | Review code changes |
| Assess findings from another scanner or issue tracker | Triage a backlog |
| Generate a patch and check whether it fixes the issue | Fix and verify findings |
| Share results or assign remediation work | Export and track findings |
For automation, use the CLI guides to scan repositories in bulk or run scans in CI. Look up commands and defaults in the CLI reference.
Codex Security scans application code. For permissions and sandbox controls that govern Codex itself, see Agent approvals and security.