35,578 Grok Build apps opened without sign-in, including SpaceXSI's own sales plans

Claroc opened 35,578 published Grok apps without signing in, including SpaceXSI sales plans, employee rosters, medical data and plain-text passwords.

By · Published

Primary source: arstechnica.com

Why it matters

AI app builders let employees publish working internal tools in minutes, outside normal IT review, and Grok's hostname-based sharing made those tools enumerable through passive DNS. A sales map, a patient briefing and a staff roster can all end up behind the same public link pattern.

A hooded figure stands beside an office doorway, facing a conference table with stacked papers, a black wall logo, and a glowing green lock symbol.

Claroc opened 35,578 published Grok apps without signing in, including SpaceXSI sales plans, employee rosters, medical data and plain-text passwords.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.