OpenAI says GPT-5.2-Codex is its ‘most advanced agentic coding model yet’ – here’s what developers and cyber teams can expect
GPT-5.2 Codex is available immediately for paid ChatGPT users and API access will be rolled out in “coming weeks”
OpenAI has announced a big update for its Codex coding agent as the company targets big improvements for developers and cybersecurity teams.
According to the company, GPT-5.2-Codex, a version of GPT-5.2 optimized specifically for Codex, is its most “advanced agentic coding model yet”.
Improvements touted by OpenAI include more efficient “long-horizon work” and better performance working on large code changes, such as refactoring and migrations.
Improved performance in Windows environments were also revealed alongside stronger cybersecurity capabilities.
“GPT‑5.2-Codex builds on GPT‑5.2’s strengths in professional knowledge work and GPT‑5.1-Codex-Max’s frontier agentic coding and terminal-using capabilities,” the company said in a blog post.
“GPT‑5.2-Codex is now better at long-context understanding, reliable tool calling, improved factuality, and native compaction, making it a more dependable partner for long running coding tasks, while remaining token-efficient in its reasoning.”
Codex first launched in May this year, and since the launch and integration of GPT-5, uptake of the coding agent has skyrocketed, according to OpenAI. Indeed, a host of large organizations are now using the tool to supercharge software engineering activities.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
“Codex usage has more than 20x’d since the launch of GPT-5-Codex in August, and customers like Cisco, Ramp, Virgin Atlantic, Vanta, Duolingo, and Gap are using the agent to accelerate their engineering teams.”
GPT-5.2-Codex performance improvements
According to OpenAI, GPT-5.2-Codex boasts “state-of-the-art performance” on SWE-Bench Pro and Terminal-Bench 2.0.
These are benchmarks aimed at testing agentic AI performance across an array of realistic environments. In terms of accuracy, the new model recorded an SWE Bench Pro mark of 56.4%, marking marginal improvements on GPT-5.2 (55.6%) and GPT-5.1 (50.8%).
Meanwhile, on Terminal-Bench 2.0 the model recorded an accuracy rating of 64.0% compared to GPT-5.2’s 62.2% and GPT-5.1-Codex-Max’s 58.1%.
“With these improvements, Codex is more capable at working in large repositories over extended sessions with full context intact,” the company explained.
“It can more reliably complete complex tasks like large refactors, code migrations, and feature builds — continuing to iterate without losing track, even when plans change or attempts fail.”
Cyber improvements
On the cybersecurity front, OpenAI said the new model marks another significant jump in terms of capabilities.
Initial testing of the model in capture-the-flag challenges shows it scored a higher accuracy rating than GPT-5.2, GPT-5-Codex, and GPT-5.1-Codex-Max, for example.
“When charting performance on one of our core cybersecurity evaluations over time, we see a sharp jump in capability starting with GPT‑5-Codex, another large jump with GPT‑5.1-Codex-Max and now a third jump with GPT‑5.2-Codex,” OpenAI noted.
“We expect that upcoming AI models will continue on this trajectory.”
Notably, the company said it plans to introduce new safeguards for the model to prevent potential misuse.
Earlier this month, ITPro reported that OpenAI plans to collaborate with red teaming organizations to test systems, and will set up a ‘trusted partner system’ for future model experimentation by security researchers.
The company is now inviting security researchers to participate in an upcoming pilot for the Cyber Trusted Access scheme.
How to get your hands on GPT-5.2-Codex
GPT-5.2 Codex is available now for all paid ChatGPT users, OpenAI confirmed. Similarly, the company said it’s “working towards safely enabling access” for API users in the coming weeks.
“In parallel, we’re piloting invite-only trusted access to upcoming capabilities and more permissive models for vetted professionals and organizations focused on defensive cybersecurity work,” the company added.
“We believe that this approach to deployment will balance accessibility with safety.”
FOLLOW US ON SOCIAL MEDIA
Make sure to follow ITPro on Google News to keep tabs on all our latest news, analysis, and reviews.
You can also follow ITPro on LinkedIn, X, Facebook, and BlueSky.

Ross Kelly is ITPro's News & Analysis Editor, responsible for leading the brand's news output and in-depth reporting on the latest stories from across the business technology landscape. Ross was previously a Staff Writer, during which time he developed a keen interest in cyber security, business leadership, and emerging technologies.
He graduated from Edinburgh Napier University in 2016 with a BA (Hons) in Journalism, and joined ITPro in 2022 after four years working in technology conference research.
For news pitches, you can contact Ross at ross.kelly@futurenet.com, or on Twitter and LinkedIn.
-
The UK AI revolution: navigating the future of the intelligent enterpriseAs AI reshapes industries and societies, decision-makers in the UK face a critical choice: build a sovereign future or merely import it.
-
Turning the UK AI revolution into a sovereign realityThe UK AI Revolution documentary series posed difficult questions about AI’s hype, control, and future. Now, IT leaders must find the architectural answers
-
Retailers are turning to AI to streamline supply chains and customer experience – and open source options are proving highly popularNews Companies are moving AI projects from pilot to production across the board, with a focus on open-source models and software, as well as agentic and physical AI
-
Microsoft CEO Satya Nadella wants an end to the term ‘AI slop’ and says 2026 will be a ‘pivotal year’ for the technology – but enterprises still need to iron out key lingering issuesNews Microsoft CEO Satya Nadella might want the term "AI slop" shelved in 2026, but businesses will still be dealing with increasing output problems and poor returns.
-
OpenAI says prompt injection attacks are a serious threat for AI browsers – and it’s a problem that’s ‘unlikely to ever be fully solved'News OpenAI details efforts to protect ChatGPT Atlas against prompt injection attacks
-
OpenAI turns to red teamers to prevent malicious ChatGPT use as company warns future models could pose 'high' security riskNews The ChatGPT maker wants to keep defenders ahead of attackers when it comes to AI security tools
-
AWS has dived headfirst into the agentic AI hype cycle, but old tricks will help it chart new watersOpinion While AWS has jumped on the agentic AI hype train, its reputation as a no-nonsense, reliable cloud provider will pay dividends
-
AWS CEO Matt Garman says AI agents will have 'as much impact on your business as the internet or cloud'News Garman told attendees at AWS re:Invent that AI agents represent a paradigm shift in the trajectory of AI and will finally unlock returns on investment for enterprises.
-
Anthropic announces Claude Opus 4.5, the new AI coding frontrunnerNews The new frontier model is a leap forward for the firm across agentic tool use and resilience against attacks
-
Microsoft's new Agent 365 platform is a one-stop shop for deploying, securing, and keeping tabs on AI agentsNews The new platform looks to shore up visibility and security for enterprises using AI agents