Oracle and OpenAI bring ChatGPT and Codex into the enterprise stack

For years, the Oracle–OpenAI relationship was mostly about concrete and silicon: Oracle data centers supplying the computing power behind OpenAI's models. On October 27, 2026, at Oracle AI World in Las Vegas, it moved into the software itself. The two companies announced four products that put OpenAI's models, ChatGPT, and Codex directly inside Oracle's business applications, databases, and cloud — a bid to make Oracle's stack the place where enterprise AI work actually happens.

Oracle chief executive Clay Magouyrk said the suite unites OpenAI's capabilities with Oracle's applications, data, and cloud infrastructure; OpenAI president Greg Brockman said more businesses are choosing OpenAI as it becomes easier to put AI to work through the tools they already use. Both say they want to set the standard for the agent-ready enterprise — where agents do real work inside governed business systems, not just answer questions beside them.

The four products, in plain terms#

Oracle describes the four as the first offerings of the expanded collaboration, aimed at employees, IT teams, security professionals, and founders respectively:

Workspace is the centerpiece. Oracle describes it as goal-driven: an employee states what they want — chasing a customer commitment, untangling a supply disruption, explaining a variance — and the system assembles the relevant information, coordinates Oracle agents and connected applications, and moves the task forward inside existing permissions, while Oracle applications do the authoritative work. The key claim is that governance travels with the agent.

Security testing, by agent

Security Mesh is the most technically distinctive of the four. Rather than selling customers a scanning tool, Oracle will run testing as a managed service: it maps a customer's systems and connections, proposes a test plan for approval, then sends specialized AI agents to investigate weaknesses and test how they could be exploited. A separate agent repeats the test to confirm a finding is real, the platform ranks what to fix first, and coding agents can draft fixes for the team's approval. After changes go in, the platform re-checks that the gap is closed and normal activity still works.

The design answers the obvious objection to letting AI agents attack your own infrastructure: customers define where testing is authorized and control its scope, while Oracle manages safeguards meant to prevent outages. It is a red team you rent rather than build.

Why this pairing matters

For OpenAI, the deal is distribution into the back office. The company has been famously consumer-shaped — ChatGPT first, enterprise second — and Oracle's applications run invoicing, supply chains, HR, and finance for companies that do not buy software lightly. Getting inside those workflows, through a vendor those companies already trust, is a faster route to enterprise credibility than selling seats one team at a time.

For Oracle, the deal is a conversational front door. Its applications hold the systems of record, but employees increasingly start work in a chat window. If that window reaches Oracle data under Oracle's governance, Oracle keeps the workflow — and the customer — inside its walls. The SMB Bundle applies the same logic to startups: $12,000 a year in credits, for up to three years, gets a young company building on OCI before it has a vendor preference. The push extends an infrastructure partnership that was already deep: OpenAI trained models at Oracle's Abilene, Texas, campus, and earlier this year Oracle began letting eligible customers buy OpenAI products through Oracle Marketplace.

What is still unclear

Plenty — and Oracle is unusually candid about it. Its announcement carries a future-product disclaimer: nothing described is a commitment to deliver, and timing, release, and pricing may change at Oracle's sole discretion. Workspace is "coming soon" with no date, App Composer is in Limited Availability, and Oracle has not said when most of the four products will be generally available or what most of them will cost. Treat every date and price here as provisional.

The SMB Bundle's fine print is narrower than the headline. Eligibility is limited to verified, privately held, for-profit US businesses independent of a larger company, one enrollment per startup, renewals subject to review — and government entities, nonprofits, crypto businesses, and service-only consultancies are excluded, as are existing customers that have consumed more than $250,000 in Oracle Universal Credits. The $12,000 is real, but it is a funnel into OCI: consumption beyond the credits is billable. And there is lock-in: Workspace and Security Mesh are deeply integrated with OpenAI's models and Oracle's systems, so switching away later would not be a simple choice.

What to watch#

First, dates and prices: Workspace's launch window and App Composer's path to general release will tell us whether this is a product line or a press release. Second, adoption: whether large Oracle customers route daily work through ChatGPT plugins, and whether the SMB Bundle converts credit recipients into paying OCI customers. Third, the competitive response — Microsoft and Anthropic are fighting for the same enterprise agent layer. The deeper signal is structural: the labs spent years competing on models, and the next contest is over who owns the workflow. Oracle just bet that, for a big slice of the economy, it will be the vendor that already runs the back office, with OpenAI's models as the interface.