Codex Cloud: New CLI, Code Review & Security Features

👁 124 reads

Codex Cloud is the biggest developer news from OpenAI DevDay 2026: tasks run from a shared, saved environment and continue when your laptop is closed. Also new are a refreshed Codex CLI with voice control and /agents view, code review in the ChatGPT app with automatic reviews, and Codex Security Cloud for scanning repositories. We describe what’s available in which plan, how much it costs, and how to get started. We tested the CLI in our terminal.

What OpenAI Announced for Codex

At DevDay 2026 (September 29), OpenAI showed four changes to Codex: cloud work from any device, refreshed CLI, code review in the ChatGPT app, and Codex Security Cloud. We’re tracking the full list of announcements from the evening, including models and new plans, in our live coverage of OpenAI DevDay 2026. Here we focus on developer tools. Descriptions of cloud features come from OpenAI’s summary and documentation, since we didn’t run those ourselves.

Codex Cloud: One Environment for the Whole Team

Codex could already run tasks remotely. What’s new are reusable environments: you prepare repositories, dependencies, installation scripts, and permissions once, publish the environment, and each subsequent task starts from that configuration in its own separate workspace. According to the documentation, a task “can continue working when your computer is asleep.” Teams get a shared configuration with approved settings, and internet access can be restricted to package managers and selected domains.

Getting started according to the official Codex Cloud instructions:

1. Open ChatGPT in your browser or desktop app and sign in.
2. In a new task, select Work in > Cloud, then Select environment. The first time, choose Create environment.
3. Point to GitHub repositories and click Get started. Codex will review the project, install dependencies, and check that everything works. If something’s missing, it will ask.
4. Review the test results and click Publish. Wait for the “Environment published” message.
5. Select Start a new task, describe the task, and at the end commit or open a pull request.

From a phone it works differently. Codex Remote in the ChatGPT iOS app controls tasks on your computer (Mac or Windows): you start a task, approve commands, and review file changes. Pairing happens in the desktop app, in Settings > Connections > Control this Mac or PC, via QR code. Your computer must be on and online.

Refreshed Codex CLI: Voice and /agents View

OpenAI announces that in the CLI you can now start and control tasks with voice, and a new /agents view makes it easier to delegate work and track multiple tasks at once. They’ve also improved command editing, session resumption, and git worktree support, and the terminal interface is supposed to be clearer during long sessions. According to OpenAI’s summary, the new CLI is available in all plans.

We checked what we could verify without a paid account. Results from September 29, 2026, around 7:55 PM Central European Time:

The version 0.159.0 changelog on GitHub doesn’t mention voice or /agents. It lists items including the instant_interrupt option (new command interrupts the model mid-response), a new welcome screen, and protection for .aws directories in the sandbox. Automatic command suggestions and the built-in plugin-creator skill were removed. From our local version, it appears that some elements announced on stage have been in the CLI for several releases. This is our interpretation; OpenAI didn’t provide a version number for the new features.

Code Review in the ChatGPT App

A new Code Review tab in the ChatGPT desktop app collects pull requests from multiple projects. You see the change description, comments, test results, and diff, can ask Codex about risks, and then leave a comment on GitHub or GitLab. GitHub support is generally available, GitLab is in preview.

Automatic reviews are enabled in Codex Code Review settings: you select a repository and the Automatic review toggle. You need push or admin permissions in the repository. On GitHub, Codex only reports P0 and P1 priority bugs, and you add your own review rules in an AGENTS.md file, in the ## Code Review Rules section. You can manually trigger a review with a @codex review comment in a pull request. Reviews triggered by GitHub count as Code Review usage. Local reviews (/review in CLI) count toward your plan’s general limit.

Codex Security Cloud

This is a plugin that scans entire GitHub repositories on demand or on a schedule and tracks new commits. According to the FAQ, each analysis runs in a one-time, isolated container: first a threat model of the repository is created, then scanning, validation (attempting to reproduce vulnerabilities in a sandbox to filter out false positives), and a fix proposal. Fixes aren’t deployed automatically; you approve the pull request draft yourself. OpenAI notes that the tool complements, not replaces, traditional SAST scanners. The package includes access to Daybreak Blue program models without a separate application.

Installation: Plugins in ChatGPT, search for Codex Security Cloud, connect to GitHub, select a repository and cloud environment, Start scan. You enable commit monitoring by selecting Commit changes instead of Repository.

Who Has Access in Which Plans

Plan pricing from the Codex pricing page:

The most expensive Pro at $500 is the new ChatGPT Pro 500 plan with Ultrafast mode. If you’re deciding between Plus and Pro, check out our comparison ChatGPT Plus or Pro.

How to Get Started with the CLI

1. Install: npm install -g @openai/codex (or use the installer: on Windows powershell -ExecutionPolicy ByPass -c "irm https://chatgpt.com/codex/install.ps1 | iex", on macOS and Linux curl -fsSL https://chatgpt.com/codex/install.sh | sh).
2. Check version: codex --version. Update an older installation with codex update.
3. Navigate to your project directory and run codex. On first start, choose Sign in with ChatGPT.
4. Ask for something small, like “Tell me about this project,” and before a bigger change, commit so you have a restore point.
5. Send a task to the cloud from the terminal with codex cloud, once you have a published environment.

We wrote about what happens to company code with such agent providers in our article coding agents in companies: data, security, and licenses. You can build your own agents on the same engine with OpenAI’s Agents API, and we describe ChatGPT account login in other tools in Sign in with ChatGPT.

Frequently Asked Questions

Does Codex Cloud work in free ChatGPT?

No. According to OpenAI, Codex Cloud is in Plus, Pro, Business, Healthcare, Edu, and Enterprise plans. Free and Go get GPT-6 Luna in the desktop app.

What is the latest Codex CLI version?

As of September 29, 2026, the latest stable version on npm is 0.159.0. Check with npm view @openai/codex version.

Does automatic code review cost extra?

There’s no separate charge. Reviews triggered by GitHub use your plan’s Code Review limit, and local reviews count toward your general Codex limit.

How does Codex Security Cloud differ from the Codex Security plugin?

The Cloud version scans GitHub repositories in Codex’s cloud and tracks new commits. The regular Codex Security plugin scans a local repository in a Codex task on your computer.