Verdict
Codex suits teams already paying for ChatGPT that want one agent across the terminal, IDE and cloud, with published per-model usage ranges and strong admin controls 1,6,16. The catch is churn and missing undo: Codex now lives inside ChatGPT, GPT-5.5 leaves on October 14, 2026, and you keep your own Git checkpoints to roll back its edits 3,5,14.
Good fit if you are
- Teams on ChatGPT Business or Enterprise that want coding agents under the same workspace and admin controls
- Developers who want an open-source CLI with OS-level sandboxing on macOS, Linux and Windows
- Teams that hand work to an agent from GitHub pull requests, Slack or Linear
Look elsewhere if you are
- Teams that want Anthropic or Google models as the main engine
- Developers who want built-in checkpoints to rewind an agent's edits
- Buyers who want a standalone coding product separate from ChatGPT
Pros and cons
What we like
- Included in every ChatGPT plan, with Plus at $20 a month and Business at $20 per user per month on annual billing 1.
- OpenAI publishes per-model usage ranges, such as 15 to 160 local messages per five hours on GPT-6.1 Sol with Plus 1.
- An OS-enforced sandbox on macOS, Linux and Windows keeps network access off by default, and an auto-review agent can handle approvals 6,7.
- The Codex CLI, SDK and app server are open source on GitHub 21.
- Ties for third on the independent Terminal-Bench 4.0 leaderboard at 58.18% 25.
What to watch
- No built-in undo or checkpoints; OpenAI tells you to create Git checkpoints before and after each task 3.
- Plus is pitched at a few focused sessions a week, so daily use pushes you to Pro from $100 a month 1.
- Enterprise and Edu pricing is by quote, and credit prices sit on separate rate cards 1.
- Using an API key drops cloud features such as GitHub code review and Slack 1.
- Gartner Peer Insights reviewers report lost context in long sessions and changes nobody asked for 27.
Key facts
| Made by | OpenAI |
|---|---|
| Pricing | Included in ChatGPT: Plus $20/month, Pro from $100, Business $20-$25 per user |
| Cost per developer | $100 a month (Pro at the $100 tier; Plus at $20 covers only a few sessions a week) |
| Also requires | Needs a ChatGPT account or an OpenAI API key 1,2 |
| Where it runs | Terminal, IDE, Cloud (background), Web app, GitHub, Slack |
| AI models | OpenAI models only, such as GPT-6 Astra, GPT-6.1 Sol, GPT-6 Sol and GPT-6 Luna; local clients can also reach OpenAI models through Amazon Bedrock 1,15 |
| Works with | VS Code, Cursor, Windsurf, Xcode, JetBrains, GitHub, Slack, Linear, Amazon Bedrock |
| Security reports | SOC 2 Type II, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR, PCI DSS |
| Free trial | Free plan with GPT-6 Luna in the desktop app, subject to rollout |
What OpenAI Codex is
Codex is OpenAI's coding agent. It works in the terminal through the open-source Codex CLI, in VS Code-style editors, Xcode and JetBrains IDEs, in the ChatGPT desktop app, and in the cloud through Codex Cloud 2,3,4,5,21. It inspects code, makes edits, runs commands and hands back diffs or pull requests 2,4.
Codex has no subscription of its own. It comes with every ChatGPT plan, shares usage limits with ChatGPT Work, and runs as a mode inside the ChatGPT desktop app 1,5. OpenAI launched it in May 2025 as a cloud agent inside ChatGPT 28 and upgraded it with GPT-5-Codex that September 29. Today it runs the GPT-6 family, and GPT-5.5 leaves on October 14, 2026 14.
What it can do
Locally, Codex works inside a sandbox the operating system enforces: Seatbelt on macOS, bubblewrap on Linux and WSL2, and a native sandbox on Windows 7. In the default Auto preset it reads, edits and runs commands in the working directory, and asks before writing elsewhere or using the network 6. Auto-review can pass those approval requests to a separate reviewer agent 6. You check edits with /diff or ask for a /review of the working tree, and codex exec runs non-interactively in scripts and CI 9.
Codex Cloud runs tasks from a published environment that Codex sets up and tests for your repositories; each task gets its own workspace and keeps going while your computer sleeps 4. You review changed files and test results, then commit or open a pull request 4. Mention @codex review on a GitHub pull request for a code review 10, assign a Linear issue to Codex 12, or ask @ChatGPT in Slack to send repository work to a cloud task 11. Admins set requirements through Agent Security and managed configuration that users can't override 16,17.
- Actions. Locally, Codex reads files, edits and runs commands in the working directory, and
codex execruns it in scripts and CI 2,6,9. Codex Cloud runs each task in its own workspace from a published environment and ends with a commit or pull request, while MCP servers and subagents extend what it can do 4,13,14. - Setup. Install the CLI with a one-line script, npm or Homebrew and sign in with ChatGPT 2; the IDE extension installs from the VS Code marketplace 3. Codex Cloud needs a GitHub connection and a published environment, which Codex prepares and tests for you 4.
- Reviewing its changes. Locally you check edits with /diff or in the IDE and approve anything outside the sandbox, while cloud tasks show changed files and test results before you commit or open a pull request 3,4,6,9.
- Analytics. Enterprise admins get a Codex analytics dashboard, an Analytics API for aggregate reporting and the Compliance API for audit records 18,19.
Pricing
Codex comes with ChatGPT plans rather than its own subscription 1. Free and Go ($8 a month) get GPT-6 Luna in the desktop app, subject to rollout 1. Plus at $20 a month adds the CLI, IDE, web and cloud features, and OpenAI pitches it at a few focused sessions a week 1. Pro costs $100, $200 or $500 a month and currently has no five-hour limit 1. Business costs $20 per user per month billed annually or $25 monthly, with at least two users; Enterprise and Edu are quote-only 1. OpenAI publishes ranges per five hours: on Plus, 15 to 160 local messages with GPT-6.1 Sol or 5 to 45 with GPT-6 Astra, and weekly limits may apply on top 1. Past the limit you spend credits, priced per million tokens, such as 50 input and 250 output credits for GPT-6.1 Sol 1. Fast mode uses included limits 2.5x faster 1. For all-day use, budget for Pro at $100 a month.
| Plan | Price | Includes |
|---|---|---|
| Free | $01 | GPT-6 Luna in the desktop app, subject to rollout |
| Go | $8/month1 | GPT-6 Luna in the desktop app, subject to rollout |
| Plus | $20/month1 | Codex on web, CLI, IDE and iOS; automatic code review and Slack; GPT-6.1 Sol and GPT-6 Luna; 15-160 local messages per 5 hours on GPT-6.1 Sol; credits extend usage |
| Pro | $100, $200 or $500/month1 | Everything in Plus; no five-hour limit at present; Astra Ultrafast on the $500 tier |
| Business | $20/user/month billed annually (2+ users), $25 monthly1 | Larger cloud VMs, SAML SSO and MFA, no training on business data by default; credits extend usage |
| Enterprise & Edu | Quote only1 | SCIM, EKM, RBAC, audit logs via the Compliance API, data retention and residency controls; flexible pricing without fixed rate limits |
| API key | OpenAI API token prices1 | Codex in the CLI, SDK or IDE extension; no cloud features |
| Credits | Per million tokens, e.g. GPT-6.1 Sol 50 input / 250 output credits1 | Usage beyond plan limits on Plus, Pro and credit-based workspaces |
Security and data
OpenAI's trust portal lists SOC 2 Type 2 for the API and ChatGPT Enterprise, Edu and Team, and ISO 27001, 27017, 27018, 27701 and 42001 for the API and ChatGPT Enterprise and Edu, plus CSA STAR and PCI DSS 22. Business, Enterprise and API data isn't used for training by default 1. Enterprise and Edu add data retention and residency controls, EKM, SCIM and role-based access control 1. Zero data retention and non-US data residency are supported, though under them some safety pauses end a task instead of letting you resume, and local computer access with Work Cloud doesn't provide strict ZDR 6,20. Locally, network access is off by default and writes stay inside the workspace 6.
- Zero data retention. Zero data retention is a supported workspace data control, but local computer access with Work Cloud doesn't provide strict ZDR 6,20
- Data residency. Data residency controls on Enterprise and Edu, including non-US data storage 1,6
- Training on your data. No training on Business, Enterprise or API data by default 1
- AI models. OpenAI, directly or through Amazon Bedrock 15
What customers say
Independent review volume for Codex on its own is thin. It holds 4.8 from 5 G2 reviews 26 and 4.5 from 48 Gartner Peer Insights reviews 27. Gartner reviewers like its agent workflows and easy tool setup but report drift in long sessions 27, and G2 reviewers say limits run out quickly on Plus 26. On the independent Terminal-Bench 4.0 leaderboard, Codex ties for third at 58.18% with GPT-6 Astra and GPT-6.1 Sol 25. OpenAI names Cisco, Rakuten, Duolingo, Vanta and Instacart as users 23, and Virgin Atlantic, Ramp and Notion in its April 2026 enterprise announcement 24.
| Platform | Rating | Reviews | Seen |
|---|---|---|---|
| G2 (Codex)26 | 4.8 / 5 | 5 | 8 October 2026 |
| Gartner Peer Insights (Codex)27 | 4.5 / 5 | 48 | 8 October 2026 |
Benchmarks
| Benchmark | Result | Source |
|---|---|---|
| Terminal-Bench 4.025 | 58.18% with GPT-6 Astra and with GPT-6.1 Sol (tied rank 3 of 35) | Independent leaderboard |
What OpenAI claims (not independently verified):
- More than 3 million developers used Codex weekly in early April 2026, and more than 4 million two weeks later 24
- A typical GPT-5.6 Sol task uses 2-15 credits 1
Concerns raised by others:
How we scored it
| Criterion | Why | Score |
|---|---|---|
| What it can do 30% of the total | Codex edits, runs commands and tests locally inside a sandbox and in cloud tasks that end in a pull request, and extends through MCP and subagents 2,4,13,14. | 5/5 |
| Pricing 20% of the total | Plan prices and per-model usage ranges are public, but Enterprise is quote-only and credit prices sit on separate rate cards 1. | 4/5 |
| Control 20% of the total | Approval modes, an OS-level sandbox, diff review and admin-enforced requirements with Compliance API audit records are documented 6,7,8,9,17,19, but there is no built-in checkpoint or undo 3. | 4/5 |
| Security and data 15% of the total | OpenAI lists SOC 2 Type 2 and ISO 27001 and 42001 for ChatGPT Enterprise and the API 22, supports ZDR and data residency controls 1,6, and doesn't train on business data by default 1. | 5/5 |
| Customer evidence 15% of the total | Codex ties for third on the independent Terminal-Bench 4.0 leaderboard 25, holds 4.5 from 48 Gartner Peer Insights reviews 27, and OpenAI names Cisco, Rakuten and Instacart as users 23. | 5/5 |
| Total | Weighted sum of the 5 levels, out of 10. | 9.2 |
Sources
- Pricing
- Codex CLI
- Codex IDE extension
- Codex Cloud
- ChatGPT desktop app
- Agent approvals & security
- Sandbox
- Permissions
- Command line options and slash commands
- Review GitHub pull requests with Codex
- Use ChatGPT in Slack
- Use Codex in Linear
- Model Context Protocol
- Models
- Use ChatGPT Work and Codex with Amazon Bedrock
- Agent Security
- Managed configuration
- Workspace analytics
- Compliance API and audit events
- ChatGPT Work Overview
- Open Source
- OpenAI Trust Portal
- Codex is now generally available
- Scaling Codex to enterprises worldwide
- Terminal-Bench 4.0 leaderboard
- Codex Reviews
- Codex Reviews & Ratings
- OpenAI launches Codex, an AI coding agent, in ChatGPT
- OpenAI upgrades Codex with a new version of GPT-5
