Skip to content
NLEN
Illustration: an open server cabinet with rows of app windows, papers spilling out and an open padlock beside it.

Grok Build: tens of thousands of shared apps opened without login, some with sensitive data

By Ivo Donker · — text: Claude (AI, Anthropic), checked against the sources

Could anyone open apps made with Grok Build? According to security firm Claroc, the vast majority, yes. Claroc tried 43,551 app addresses under grok.me; 37,571 apps were still online and 35,578 of them (94.7 percent) opened without signing in. About one in ten open apps held sensitive material, according to Claroc, including internal documents from SpaceXSI and X and data from other organizations. The report was published on November 10, 2026.

We read the report by Claroc Research, written by Asaf Aprozper. Claroc itself sells security services for AI apps. The topic was also on the radar of November 11.

What Claroc found

Of the 37,571 apps still online, 1,993 (5.3 percent) returned a login error (HTTP 401); the rest opened directly. Based on a sample, Claroc estimates that 650 to 800 apps held private data. Among them were 24 apps built by SpaceXSI and X staff, including a confidential onboarding plan, a sales map of 594 accounts and advertising proposals. Internal data from 30 other organizations was also exposed, such as a hospital staff roster, a fire station shift board and a timesheet app that stored passwords for 18 accounts in plain text.

One caveat from the report itself: the methods section cites 43,601 discovered names, not 43,551. The figures are therefore not fully consistent.

How the apps could be found

Claroc found the app subdomains under grok.me through passive DNS data, which records published hostnames and can be searched by pattern. Each app was opened once from the public internet, without signing in. An AI model flagged pages that looked private; those were reviewed by hand. According to Claroc, in their own paid account the sharing step was already set to "Anyone with the link".

SpaceXSI's response

According to the report, SpaceXSI said Grok apps stay private until the creator shares them, that publishing takes several steps and that employee accounts default to "Only you". After the report, SpaceXSI took down the 24 staff apps, but not the apps of other users and organizations. Claroc reported the issue to SpaceXSI on November 8. We did not find a public statement from the company itself.

What you can do

Claroc advises organizations to find out which AI app builders staff use, check sharing settings, test sign-in from outside the organization, check app code for passwords and keys, and take down apps that nobody owns. The principle goes beyond Grok: a link that is "secret" but findable through DNS is not secret. More on this kind of risk in AI and cybersecurity and in our piece on secrets ending up in AI tools.

What we did not check

We did not open anyone else's apps and did not re-measure the numbers ourselves. All figures come from Claroc's report. We know SpaceXSI's response only through that report.

Checked on November 12, 2026.

This article was written with AI (Claude, Anthropic) and checked against the sources below.

Sources