OpenAI announced Aardvark, a GPT-5-powered agent in private beta that builds a threat model of a repository, scans commits, tries to trigger suspected flaws in a sandbox, and attaches Codex-generated patches for human review. OpenAI reports 92% recall on known and synthetically introduced vulnerabilities in its 'golden' repositories and ten CVEs from open-source scanning, and planned pro-bono scanning for some non-commercial projects.
Why it matters
It combined LLM reasoning, sandbox validation and patch generation in one defensive agent from a frontier lab, later relaunched as Codex Security.
Key facts
As stated in the sources, with where to find them.
- In benchmark testing on 'golden' repositories, Aardvark identified 92% of known and synthetically introduced vulnerabilities.Section 'Real impact, today'
- Ten vulnerabilities found in open-source projects received CVE identifiers.Section 'Aardvark for Open Source'
- Pipeline stages: analysis (threat model), commit scanning, sandboxed validation, and patching via Codex for human review.Section 'How Aardvark works'
- OpenAI states around 1.2% of commits introduce bugs in its testing.Section 'Why it matters'
Findings that cite this record
No tracked finding cites this record yet.
Key questions this bears on
- Is AI shifting the balance between finding and fixing vulnerabilities?Discovery is ahead. AI finds real vulnerabilities faster than they are fixed, and simple checks overstate how often AI patches work.
Sources
Related records
Mar 6, 2026
Feb 5, 2026
Aug 8, 2025
Aug 4, 2026
Feb 20, 2026
Oct 3, 2025