OpenAI Launches GPT-5.2-Codex for Advanced Agentic Coding and Cyber Defense

Added Dec 18, 2025
Article: PositiveCommunity: PositiveMixed
OpenAI Launches GPT-5.2-Codex for Advanced Agentic Coding and Cyber Defense

OpenAI launched GPT-5.2-Codex, an agentic coding model with stronger long-horizon performance, better tool use and vision, and state-of-the-art results on key engineering benchmarks. It significantly improves reliability across large codebases and Windows environments, and advances cybersecurity capabilities while remaining below ‘High’ on OpenAI’s risk scale. The rollout begins for paid ChatGPT users, with API access and a vetted trusted-access program for defensive use cases to follow.

Key Points

  • GPT-5.2-Codex advances agentic coding with long-horizon reasoning, context compaction, stronger tool use, improved vision, and better performance on large refactors, migrations, and Windows environments.
  • It sets state-of-the-art results on SWE-Bench Pro and Terminal-Bench 2.0 and sustains reliable work across large repositories and extended sessions.
  • Cyber capabilities see a major jump, though the model remains below ‘High’ under OpenAI’s Preparedness Framework; additional in-model and product safeguards are in place with a published system card.
  • A real-world case shows GPT-driven assistance helped discover and responsibly disclose new React vulnerabilities, illustrating both defensive acceleration and dual-use risks.
  • Deployment starts for paid ChatGPT users now, API access is coming, and a vetted, invite-only trusted access program will unlock more permissive capabilities for defensive cybersecurity.

Sentiment

Mixed-positive. The HN community is genuinely impressed with Codex's code review quality and bug-finding abilities, and many share real-world experiences that validate the article's claims about improved agentic coding. However, a vocal minority raises legitimate concerns about benchmark transparency, comparison avoidance against competitors, over-censorship in security use cases, and potential astroturfing. The overall tone is cautiously enthusiastic rather than fully convinced, with the strongest skepticism directed at OpenAI's selective benchmarking and cybersecurity claims.

In Agreement

  • Many users confirm GPT-5.x/Codex is superior to Claude at careful, methodical code review — consistently catching serious bugs, subtle inconsistencies, and security vulnerabilities that Claude misses.
  • A popular workflow of using Codex for plan review and bug-finding combined with Claude for fast implementation is widely endorsed as highly effective.
  • Users report Codex excelling at complex, long-horizon coding tasks including large refactors, embedded C programming, Windows environments, and finding GC bugs in low-level code.
  • The cybersecurity capability jump is seen as real and valuable, with the invite-only access for vetted security professionals viewed as a reasonable approach to dual-use risk.
  • Codex's native context compaction and more reliable tool calling are noted as meaningful improvements for extended agentic sessions in large repositories.

Opposed

  • OpenAI only benchmarks GPT-5.2-Codex against other OpenAI models, avoiding comparison to Opus 4.5 or Gemini 3 Pro, which critics read as avoiding unfavorable head-to-head results.
  • Some users find Codex models too eager to edit files unprompted when they just want a discussion, and report frustrating timeouts or hangs during long reasoning sessions.
  • Frustration persists that OpenAI's censorship of offensive security work makes GPT models less useful for legitimate white-hat security professionals, despite the announcement's emphasis on cyber defense.
  • Claude Code's overall tooling ecosystem, ergonomics, and human-in-the-loop design are considered superior to Codex CLI by a portion of commenters, with claims that it's the model quality — not tooling — driving results.
  • Several users accuse positive comments in the thread of being astroturfed or artificially enthusiastic, and express skepticism that the announcement is more marketing than a genuine capability leap over competitors.