Claroc finds 35,578 Grok Build apps open to anyone with a link

SpaceX’s AI division built a tool that lets people spin up apps fast. According to Claroc Research, it also left nearly all of those apps open to anyone holding a link.

In a report published November 10, 2026, Claroc said 35,578 of the 37,571 live apps it found on SpaceXSI’s Grok Build platform could be opened without signing in. That works out to approximately 94.7%, which is less a leak than a default setting.

What Claroc found

Claroc tested 43,551 addresses on the grok.me domain. Of those, 37,571 were live during the testing window of November 8 to 10, 2026.

The culprit, per the report, is Grok Build’s link-sharing feature. Each app gets a randomized identifier on grok.me. Anyone who has the link can walk right in, no login needed.

The most awkward detail involves SpaceXSI itself. Claroc said 24 of the open apps were built by the company and its employees.

Those staff apps reportedly held confidential internal material. The report points to sales territory maps and onboarding documents prepared for a US federal agency.

Beyond SpaceXSI’s own house

The exposure was not limited to SpaceXSI employees. Claroc said it found data tied to 30 additional organizations sitting in publicly reachable apps.

That group included 26 organizations with more than 1,000 employees. Six were Fortune 500 companies.

The types of data described in the findings include hospital staff rosters and sensitive patient records.

Claroc also flagged employee timesheets that contained passwords stored in plaintext.

Most of the 35,578 open apps were not necessarily dangerous on their own. Estimates put the number holding potentially sensitive information at between 650 and 800.

How SpaceXSI responded

Claroc said it began reporting the problems on November 8, 2026, two days before going public.

According to the research findings, SpaceXSI removed the 24 apps built by its own staff. The broader population of open user apps had not been addressed as of the report.

Background: a young platform scaling fast

Grok Build opened to broader availability in August 2026. That means the platform went from wider launch to tens of thousands of live apps in roughly three months.

The research describes the core weakness as a lack of organization-level access management. Put simply, there was no easy way for a company to say only its own people should see its apps.

What this means

For businesses using AI app builders, the lesson is uncomfortable but useful. A hard-to-guess link is not the same thing as a login.

Randomized identifiers can slow casual snooping. They do not stop someone who systematically checks addresses, as Claroc’s test of 43,551 grok.me addresses showed.

The healthcare angle raises the stakes. Patient records and hospital rosters appearing in openly reachable apps could create regulatory headaches for the organizations that built them, separate from any issue with the platform.

The federal agency link adds another layer. Onboarding material intended for a US government body showing up in an open app is the kind of detail that tends to draw questions from procurement and security teams.

For SpaceXSI, the pressure point is the gap between its response and the size of the problem. Pulling 24 staff apps addresses its own exposure, while thousands of customer apps remained open per the findings.

What to watch next: whether SpaceXSI changes Grok Build’s default sharing behavior, adds organization-level controls, or notifies the companies whose data appeared in open apps.

Also worth watching is whether any of the 30 named organizations, including the six Fortune 500 firms, respond publicly. For now, the clearest fix sits with users themselves: anyone who built a Grok Build app with sensitive data may want to check who can actually open it.