Claroc: 35,578 Grok Build apps opened for anyone, including 24 by SpaceXSI and X staff with confidential sales material
- Why random names didn't help: each app gets its own hostname, so the first legitimate visit puts the name in commercial passive-DNS data that anyone can search by pattern.
- Defaults: Claroc says in its paid account the publish dialog preselected Anyone with the link. In a team app Grok built for it, the sign-in code added whoever logged in to the team before checking membership, so any Google account could read, edit and delete records (tested only on Claroc's own app).
- SpaceXSI's response (to a reporter): apps are private until published through several steps, and employee accounts default to Only you.
- Check yours: search passive DNS for AI app-builder domains tied to your org, open hits in an incognito window, switch internal apps to Invited users or Only you, and unpublish orphans.
Sources: Claroc Research: GhostShares 2, Grok apps exposed xAI's business secrets and people's private data (Nov 10, 2026) · Ars Technica: Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI (Nov 2026)