CodeVetter vs Codex Security

A side by side look at CodeVetter and Codex Security: pricing, features and what each one is best for.

In this comparison

	CodeVetter Code Generation Visit CodeVetter	Codex Security Code Generation Visit Codex Security
What it costs
Pricing	Open source	Open source
Pricing details	Free and open source (the site says ISC; the repository LICENSE file is MIT). No CodeVetter account or subscription; optional AI review is billed by your own Anthropic, OpenAI or OpenRouter account.	The CLI and SDK are Apache-2.0 and free to install from npm as @openai/codex-security. Scans are billed as model usage against your own key, and OPENAI_API_KEY, Amazon Bedrock, OpenRouter and Fireworks all work as providers. Set a soft ceiling with --max-cost; the docs are explicit that it is an estimate, not a hard spending cap. Note that some cybersecurity requests and protected findings require approval through Trusted Access for Cyber.
Free option	Free tier	Free tier
Plans	Open source$0/mo	CLI and TypeScript SDK (Apache-2.0)$0/mo
What it is
What it does	CodeVetter is an open-source Mac app that verifies coding-agent changes by running your repo's own checks, then returns pass, fail or unverified with evidence.	OpenAI's application security agent. An Apache-2.0 CLI and TypeScript SDK that finds vulnerabilities, validates them before reporting, and proposes fixes.
The details
GitHub stars	1stars	10,937stars
Language	Rust	TypeScript
License	MIT License	Apache License 2.0
Last commit	23 Oct 2026	30 Sept 2026

What it costs

Pricing: Open source
Pricing details: Free and open source (the site says ISC; the repository LICENSE file is MIT). No CodeVetter account or subscription; optional AI review is billed by your own Anthropic, OpenAI or OpenRouter account.
Free option: Free tier
Plans: Open source$0/mo

What it is

What it does: CodeVetter is an open-source Mac app that verifies coding-agent changes by running your repo's own checks, then returns pass, fail or unverified with evidence.

The details

What it costs

Pricing: Open source
Pricing details: The CLI and SDK are Apache-2.0 and free to install from npm as @openai/codex-security. Scans are billed as model usage against your own key, and OPENAI_API_KEY, Amazon Bedrock, OpenRouter and Fireworks all work as providers. Set a soft ceiling with --max-cost; the docs are explicit that it is an estimate, not a hard spending cap. Note that some cybersecurity requests and protected findings require approval through Trusted Access for Cyber.
Free option: Free tier
Plans: CLI and TypeScript SDK (Apache-2.0)$0/mo

What it is

What it does: OpenAI's application security agent. An Apache-2.0 CLI and TypeScript SDK that finds vulnerabilities, validates them before reporting, and proposes fixes.

The details