A security firm found over 35,000 Grok Build apps open to anyone, including business plans and medical results. Anyone who shared an app should check it.
Apps built with Grok Build, the AI app-building tool from SpaceXSI, have been exposing private data to anyone who looks for them. Security firm Claroc found 43,601 Grok app links through public web records. More than 35,000 of them, nearly 95 percent, opened without any sign-in. The exposed material included business plans, medical exam results and employee ID numbers.
Grok Build lets a person describe an app by voice or text and get a working version within minutes. Each app gets a shareable link. Claroc says its tests showed new links default to "Anyone with the link." Users can switch to "invited users" or "only you." A Cursor representative, speaking for SpaceXSI, said apps are private by default. The researcher's tests contradicted that.
The links include random words, such as cinder-crane-sand-frost.grok.me. The idea is that only people who know the exact link can open it. But the random words sit at the front of the web address, before grok.me. Public databases that log web address lookups, called passive DNS records, capture those addresses. Anyone could search them and collect thousands of live apps. Google puts its random code after the domain, which keeps such links out of those records.
Anyone who built and shared a Grok Build app is at risk, especially businesses. Claroc found data from Fortune 500 employees, a defense contractor and a luxury cruise line. SpaceXSI's own 24 apps were exposed too. They held a confidential sales onboarding plan, a territory map of 594 accounts and advertising proposals.
Other tools are not clear of the problem. Claroc says Lovable, Bolt and Replit also give each app its own web address, so the same records expose them. Grok is where the firm found by far the most sensitive company data.
People who never shared a Grok Build app, or who set sharing to invited users or only you, are in far better shape.
The alert box above lists the steps. The short version is to lock down sharing, pull any app holding sensitive data until it is locked, and ask your IT contact about other AI app builders in use.
Claroc told SpaceXSI on Sunday and got no reply. It then tagged Elon Musk and Grok manager Matt Palmer on X. SpaceXSI began removing its own 24 apps within hours of a reporter's email, and those links now return "app not found." Nearly all other exposed data was still available when the story was published. Claroc is notifying affected companies, and the cruise line's security team is working to contain the exposure.
The material does not say whether SpaceXSI will change the default setting or the link design. It also does not say whether anyone besides researchers opened the exposed apps.
If you shared an AI-built app by link, switch it from "Anyone with the link" to a private setting today, and pull it if it holds customer or staff data.
Breach Secure Now has launched a connector that lets people ask ChatGPT, Claude or Microsoft Copilot about their security training data, and it is available now.
Read more: Security training data can now be asked about in ChatGPT or ClaudeTSMC, the Taiwanese chipmaker, plans to invest up to $1 billion in two leading AI developers, Anthropic and OpenAI, a sign it expects AI demand to last.
Read more: TSMC plans to put up to $1 billion into Anthropic and OpenAIAttackers got into AhsayCBS backup servers before a fix existed, then planted hidden tools and a custom backdoor. Businesses using it should act now.
Read more: Hackers broke into backup servers and hid spyware inside
