OpenQodex is an Apache 2.0 code review tool from Qodex for developers already working in Claude Code, Codex, Cursor, or Cline. It reviews unpushed commits and uncommitted files on the developer's own machine, before a push. Twenty-two built-in scanners run first, with no model, and only on lines the change actually touches. They cover secrets, security patterns, dependencies with known vulnerabilities, lint, GitHub Actions, Dockerfiles, Terraform, Kubernetes, CloudFormation, and SQL migrations. A code graph lists callers and importers of the touched code. A separate Claude Code or Codex process, started on the developer's own login and without the writing session's settings, plugins, or hooks, then has to confirm or refute every scanner finding with a reason. Scripts check that answer, and that every changed line was placed in front of a reviewer. The release sits beside Qodex's hosted reviewer, which the same team installs as a GitHub app so a whole team gets a review on every pull request, with a merge gate and a dashboard. OpenQodex needs no Qodex account and no API key of its own, and it collects no telemetry. Reports stay on the machine as HTML, Markdown, JSON, and SARIF. It runs on Mac and Linux. A push hook warns by default and blocks only when the repo sets a severity threshold. Cursor and Cline can start a review, but the reviewer still has to be Claude Code or Codex. Extra scanners can be pulled from a GitHub release, and they run only after a local approval of that exact entry. Founder Siddhant Mohan, who also builds Qodex's agent for API and web-app testing, posted the launch. A lot of agent-written code now sits on a laptop until someone opens a pull request, which is where paid per-developer reviewers usually see it for the first time. OpenQodex puts the scanner pass and a second model on that local change, using the Claude Code or Codex login the developer already has.