- Who
- Claroc
- What
- found thousands of exposed Grok Build projects containing confidential user data
- Quote
Security firm Claroc found more than 35,000 Grok-built apps that could be accessed without login, according to a recent report.
What happened
Security firm Claroc found that 35,578 of 37,571 Grok-built apps it checked were accessible to anyone with the link, including apps exposing patient records, plaintext passwords, and SpaceXSI sales data. Claroc said about one in ten open apps contained sensitive or personal information and estimated 650 to 800 apps held private data. SpaceXSI took 24 employee apps offline; Claroc is notifying other affected owners.
Why it matters
Claroc’s findings connect Grok app sharing defaults and access-control flaws to exposed personal and business data, giving readers concrete examples of the risks in AI-built apps.
Read next
See the full storyClaroc Finds Grok-Built Apps Exposed, SpaceXSI Takes Employee Apps OfflineReported by 2 sources
The story so far
Security firm Claroc found that 35,578 of the 37,571 Grok-built apps it checked could be opened by anyone with the link. About one in ten of those accessible apps contained sensitive or personal information, Claroc said, and it estimated that 650 to 800 apps held private data. Exposed information included patient records, plaintext passwords and SpaceXSI sales data. An app becomes accessible at its grok.me address when its creator clicks “Publish.” SpaceXSI took 24 employee-built apps offline, while Claroc said it was notifying other affected owners.