---
title: Claroc: 35,578 Grok Build apps opened for anyone, including 24 by SpaceXSI and X staff with confidential sales material | ctxsec
url: https://ctxsec.com/items/claroc-grok-build-35578-apps-open-anyone-with-link-spacexsi-staff-data-nov-10
description: "Claroc Research says it listed 43,551 app addresses under grok.me (where Grok publishes apps built in its Build mode) from passive DNS and subdomain discovery. Of 37,571 still online, 35,578 (94.7%) opened with no sign-in. It estimates roughly 650 to 800 hold private data, including a hospital group's 3,500-person staff roster, an ICU patient briefing and a timesheet whose script held 18 plain-text passwords. 24 open apps were built by SpaceXSI and X staff, among them a confidential onboarding plan and a 594-account sales map; SpaceXSI took those down after the report but not other users' apps."
status: "vendor research (Claroc Research, Nov 10, 2026); SpaceXSI disputes the framing, saying apps are private until a creator publishes them"
published: 2026-11-10
---

> Claroc Research says it listed 43,551 app addresses under grok.me (where Grok publishes apps built in its Build mode) from passive DNS and subdomain discovery. Of 37,571 still online, 35,578 (94.7%) opened with no sign-in. It estimates roughly 650 to 800 hold private data, including a hospital group's 3,500-person staff roster, an ICU patient briefing and a timesheet whose script held 18 plain-text passwords. 24 open apps were built by SpaceXSI and X staff, among them a confidential onboarding plan and a 594-account sales map; SpaceXSI took those down after the report but not other users' apps.

[← AI](/ai) · [markdown](/items/claroc-grok-build-35578-apps-open-anyone-with-link-spacexsi-staff-data-nov-10.md)

vendor research (Claroc Research, Nov 10, 2026); SpaceXSI disputes the framing, saying apps are private until a creator publishes them

2026-11-10 11:41 PM ET

### Claroc: 35,578 Grok Build apps opened for anyone, including 24 by SpaceXSI and X staff with confidential sales material

- **Why random names didn't help:** each app gets its own hostname, so the first legitimate visit puts the name in commercial passive-DNS data that anyone can search by pattern.
- **Defaults:** Claroc says in its paid account the publish dialog preselected Anyone with the link. In a team app Grok built for it, the sign-in code added whoever logged in to the team before checking membership, so any Google account could read, edit and delete records (tested only on Claroc's own app).
- **SpaceXSI's response** (to a reporter): apps are private until published through several steps, and employee accounts default to Only you.
- **Check yours:** search passive DNS for AI app-builder domains tied to your org, open hits in an incognito window, switch internal apps to Invited users or Only you, and unpublish orphans.

Sources: [Claroc Research: GhostShares 2, Grok apps exposed xAI's business secrets and people's private data (Nov 10, 2026)](https://blog.claroc.io/ghostshares-grok-build-apps/) · [Ars Technica: Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI (Nov 2026)](https://arstechnica.com/security/2026/11/grok-build-coding-agent-leaks-oodles-of-confidential-info-some-belonging-to-spacexsi/)