Security firm Claroc published research on 10 November 2026 on apps built with Grok's Build mode and published under grok.me.

Claroc says it tried 43,551 Grok app addresses, found 37,571 still online, and that 35,578 of those (94.7%) opened for anyone with no sign-in; it says the app names can be found through passive DNS data, because each published app gets its own hostname.

Claroc says that in the paid account it used, the publish panel had 'Anyone with the link' already selected, and that in a team app Grok built for it, any Google account could sign in and read, edit and delete records (tested only on its own apps).

Claroc says 24 open apps were built by SpaceXSI and X staff, among them a confidential onboarding plan, a sales territory map of 594 accounts and advertising proposals, and that open apps also held internal data from 30 organisations it could identify, which it does not name. It estimates roughly 650 to 800 apps held private data.

Claroc says it reported the issue to SpaceXSI on 8 and 9 November, that SpaceXSI took down the 24 staff apps but not other users' apps, and that it has begun notifying affected organisations itself. (source: Claroc)

According to Claroc, SpaceXSI told a reporter that Grok apps are private until their creator chooses to share one, that publishing takes several steps, and that employee accounts default to 'Only you'. (source: Claroc)

Ars Technica reported that SpaceXSI began removing the links within a few hours of Ars emailing questions, and that at the time of its story links for all 24 SpaceXSI apps returned an 'app not found' error. (source: Ars Technica)