OpenAI launched Codex Safety on March 6, getting into the applying safety market that Anthropic had disrupted 14 days earlier with Claude Code Safety. Each scanners use LLM reasoning as a substitute of sample matching. Each proved that conventional static utility safety testing (SAST) instruments are structurally blind to total vulnerability courses. The enterprise safety stack is caught within the center.
Anthropic and OpenAI independently launched reasoning-based vulnerability scanners, and each discovered bug courses that pattern-matching SAST was by no means designed to detect. The aggressive stress between two labs with a mixed private-market valuation exceeding $1.1 trillion means detection high quality will enhance sooner than any single vendor can ship alone.
Neither Claude Code Safety nor Codex Safety replaces your present stack. Each instruments change procurement math completely. Proper now, each are free to enterprise clients. The pinnacle-to-head comparability and 7 actions under are what you want earlier than the board of administrators asks which scanner you’re piloting and why.
How Anthropic and OpenAI reached the identical conclusion from completely different architectures
Anthropic printed its zero-day analysis on February 5 alongside the discharge of Claude Opus 4.6. Anthropic mentioned Claude Opus 4.6 discovered greater than 500 beforehand unknown high-severity vulnerabilities in manufacturing open-source codebases that had survived a long time of professional overview and tens of millions of hours of fuzzing.
Within the CGIF library, Claude found a heap buffer overflow by reasoning concerning the LZW compression algorithm, a flaw that coverage-guided fuzzing couldn’t catch even with 100% code protection. Anthropic shipped Claude Code Safety as a restricted analysis preview on February 20, out there to Enterprise and Group clients, with free expedited entry for open-source maintainers. Gabby Curtis, Anthropic’s communications lead, instructed VentureBeat in an unique interview that Anthropic constructed Claude Code Safety to make defensive capabilities extra broadly out there.
OpenAI’s numbers come from a special structure and a wider scanning floor. Codex Safety developed from Aardvark, an inner device powered by GPT-5 that entered personal beta in 2025. Through the Codex Safety beta interval, OpenAI’s agent scanned greater than 1.2 million commits throughout exterior repositories, surfacing what OpenAI mentioned have been 792 vital findings and 10,561 high-severity findings. OpenAI reported vulnerabilities in OpenSSH, GnuTLS, GOGS, Thorium, libssh, PHP, and Chromium, leading to 14 assigned CVEs. Codex Safety’s false constructive charges fell greater than 50% throughout all repositories throughout beta, in accordance with OpenAI. Over-reported severity dropped greater than 90%.
Checkmarx Zero researchers demonstrated that reasonably sophisticated vulnerabilities generally escaped Claude Code Safety’s detection. Builders may trick the agent into ignoring weak code. In a full production-grade codebase scan, Checkmarx Zero discovered that Claude recognized eight vulnerabilities, however solely two have been true positives. If reasonably complicated obfuscation defeats the scanner, the detection ceiling is decrease than the headline numbers recommend. Neither Anthropic nor OpenAI has submitted detection claims to an unbiased third-party audit. Safety leaders ought to deal with the reported numbers as indicative, not audited.
Merritt Baer, CSO at Enkrypt AI and former Deputy CISO at AWS, instructed VentureBeat that the aggressive scanner race compresses the window for everybody. Baer suggested safety groups to prioritize patches based mostly on exploitability of their runtime context quite than CVSS scores alone, shorten the window between discovery, triage, and patch, and keep software program invoice of supplies visibility in order that they know immediately the place a weak part runs.
Completely different strategies, virtually no overlap within the codebases they scanned, but the identical conclusion. Sample-matching SAST has a ceiling, and LLM reasoning extends detection previous it. When two competing labs distribute that functionality on the similar time, the dual-use math will get uncomfortable. Any monetary establishment or fintech working a business codebase ought to assume that if Claude Code Safety and Codex Safety can discover these bugs, adversaries with API entry can discover them, too.
Baer put it bluntly: open-source vulnerabilities surfaced by reasoning fashions ought to be handled nearer to zero-day class discoveries, not backlog gadgets. The window between discovery and exploitation simply compressed, and most vulnerability administration applications are nonetheless triaging on CVSS alone.
What the seller responses show
Snyk, the developer safety platform utilized by engineering groups to seek out and repair vulnerabilities in code and open-source dependencies, acknowledged the technical breakthrough however argued that discovering vulnerabilities has by no means been the exhausting half. Fixing them at scale, throughout tons of of repositories, with out breaking something. That’s the bottleneck. Snyk pointed to analysis displaying AI-generated code is 2.74 occasions extra prone to introduce safety vulnerabilities in comparison with human-written code, in accordance with Veracode’s 2025 GenAI Code Safety Report. The identical fashions discovering tons of of zero-days additionally introduce new vulnerability courses after they write code.
Cycode CTO Ronen Slavin wrote that Claude Code Safety represents a real technical development in static evaluation, however that AI fashions are probabilistic by nature. Slavin argued that safety groups want constant, reproducible, audit-grade outcomes, and {that a} scanning functionality embedded in an IDE is beneficial however doesn’t represent infrastructure. Slavin’s place: SAST is one self-discipline inside a wider scope, and free scanning doesn’t displace platforms that deal with governance, pipeline integrity, and runtime conduct at enterprise scale.
“If code reasoning scanners from main AI labs are successfully free to enterprise clients, then static code scanning commoditizes in a single day,” Baer instructed VentureBeat. Over the following 12 months, Baer expects the finances to maneuver towards three areas.
Runtime and exploitability layers, together with runtime safety and assault path evaluation.
AI governance and mannequin safety, together with guardrails, immediate injection defenses, and agent oversight.
Remediation automation. “The web impact is that AppSec spending most likely doesn’t shrink, however the heart of gravity shifts away from conventional SAST licenses and towards tooling that shortens remediation cycles,” Baer mentioned.
Seven issues to do earlier than your subsequent board assembly
Run each scanners towards a consultant codebase subset. Evaluate Claude Code Safety and Codex Safety findings towards your present SAST output. Begin with a single consultant repository, not your total codebase. Each instruments are in analysis preview with entry constraints that make full-estate scanning untimely. The delta is your blind spot stock.
Construct the governance framework earlier than the pilot, not after. Baer instructed VentureBeat to deal with both device like a brand new information processor for the crown jewels, which is your supply code. Baer’s governance mannequin features a formal data-processing settlement with clear statements on coaching exclusion, information retention, and subprocessor use, a segmented submission pipeline so solely the repos you plan to scan are transmitted, and an inner classification coverage that distinguishes code that may go away your boundary from code that can’t. In interviews with greater than 40 CISOs, VentureBeat discovered that formal governance frameworks for reasoning-based scanning instruments barely exist but. Baer flagged derived IP because the blind spot most groups haven’t addressed. Can mannequin suppliers retain embeddings or reasoning traces, and are these artifacts thought of your mental property? The opposite hole is information residency for code, which traditionally was not regulated like buyer information however more and more falls below export management and nationwide safety overview.
Map what neither device covers. Software program composition evaluation. Container scanning. Infrastructure-as-code. DAST. Runtime detection and response. Claude Code Safety and Codex Safety function on the code-reasoning layer. Your present stack handles every part else. That stack’s pricing energy is what shifted.
Quantify the dual-use publicity. Each zero-day Anthropic and OpenAI surfaced lives in an open-source mission that enterprise purposes rely upon. Each labs are disclosing and patching responsibly, however the window between their discovery and your adoption of these patches is strictly the place attackers function. AI safety startup AISLE independently found all 12 zero-day vulnerabilities in OpenSSL’s January 2026 safety patch, together with a stack buffer overflow (CVE-2025-15467) that’s doubtlessly remotely exploitable with out legitimate key materials. Fuzzers ran towards OpenSSL for years and missed each one. Assume adversaries are working the identical fashions towards the identical codebases.
Put together the board comparability earlier than they ask. Claude Code Safety causes about code contextually, traces information flows, and makes use of multi-stage self-verification. Codex Safety builds a project-specific menace mannequin earlier than scanning and validates findings in sandboxed environments. Every device is in analysis preview and requires human approval earlier than any patch is utilized. The board wants side-by-side evaluation, not a single-vendor pitch. When the dialog turns to why your present suite missed what Anthropic discovered, Baer provided framing that works on the board stage. Sample-matching SAST solved a special technology of issues, Baer instructed VentureBeat. It was designed to detect recognized anti-patterns. That functionality nonetheless issues and nonetheless reduces danger. However reasoning fashions can consider multi-file logic, state transitions, and developer intent, which is the place many trendy bugs dwell. Baer’s board-ready abstract: “We purchased the correct instruments for the threats of the final decade; the know-how simply superior.”
Observe the aggressive cycle. Each corporations are heading towards IPOs, and enterprise safety wins drive the expansion narrative. When one scanner misses a blind spot, it lands on the opposite lab’s characteristic roadmap inside weeks. Each labs ship mannequin updates on month-to-month cycles. That cadence will outrun any single vendor’s launch calendar. Baer mentioned that working each is the correct transfer: “Completely different fashions purpose in a different way, and the delta between them can reveal bugs neither device alone would persistently catch. Within the quick time period, utilizing each isn’t redundancy. It’s protection via variety of reasoning techniques.”
Set a 30-day pilot window. Earlier than February 20, this check didn’t exist. Run Claude Code Safety and Codex Safety towards the identical codebase and let the delta drive the procurement dialog with empirical information as a substitute of vendor advertising and marketing. Thirty days offers you that information.
Fourteen days separated Anthropic and OpenAI. The hole between the following releases will likely be shorter. Attackers are watching the identical calendar.
