OpenAI announced on June 11 that it has agreed to acquire Ona, a startup building secure cloud execution technology for AI agents. The deal will fold Ona’s team directly into OpenAI’s Codex group, the unit behind the company’s autonomous coding platform.
Codex, which launched in May 2025, runs AI coding tasks on OpenAI’s own cloud infrastructure. Ona’s technology lets those same kinds of agents operate inside a customer’s own environment, think AWS or Google Cloud Platform, with enterprise-grade security guardrails baked in.
What Ona actually does
Ona built a platform designed for a very specific problem: how do you let AI software engineers run autonomously in isolated environments without compromising security?
The answer, according to Ona’s approach, involves Virtual Private Cloud deployments with policy enforcement and audit logging. In English: the AI agent does its work inside the customer’s own walled garden, and every action it takes gets recorded for compliance purposes.
Companies in regulated industries have been cautious about handing code generation duties to AI systems that ship data to third-party clouds. Ona’s architecture keeps sensitive code and data within the customer’s preferred infrastructure, addressing concerns around data governance and residency.
The platform also supports AGENTS.md, an emerging standard for guiding AI coding agents. It is the kind of guardrail that matters when you are letting an autonomous system make pull requests on production repositories.
Why this matters for Codex
Codex can handle pull requests, write and debug code, and manage multi-step workflows. But it runs on OpenAI’s cloud, which creates a hard ceiling on adoption for security-conscious enterprises.
By integrating Ona’s secure execution capabilities, Codex gains the ability to support long-running autonomous coding tasks, including offline execution, within customer-controlled infrastructure.
OpenAI’s acquisition playbook
This deal fits a pattern. OpenAI has been acquiring companies that offer specific technological competencies to enhance its core products. Ona’s value is its engineering team and its architecture for secure, isolated AI execution.
The financial terms of the acquisition were not disclosed. Neither was a specific timeline for integration. Ona’s team will join the Codex group, suggesting the technology will be woven into Codex rather than maintained as a separate product.