Claroc research finds 35,578 Grok apps accessible without sign-in
Claroc’s GhostShares research reported that 35,578 of the 37,571 Grok Build apps online during testing opened without sign-in. The researchers said they tested write and delete actions only on two apps they created themselves.
AT A GLANCE
Key points
- 35,578 of 37,571 online apps opened without sign-in in Claroc’s test.
- Write and delete checks were limited to the researchers’ own two apps.
- SpaceXSI removed 24 employee apps after the disclosure.
What is changing?
Claroc said in its GhostShares report, published on November 10, 2026, that it scanned 43,551 Grok app addresses, found 37,571 online and opened 35,578 without signing in. The team said most exposed apps were simple tools, while some contained corporate, employee or personal material. The rates and content classifications are Claroc’s own research findings.
The researchers did not attempt writes or deletions on third-party apps; those checks were limited to two apps they created. After Claroc’s disclosure, SpaceXSI removed 24 employee apps and said employee accounts default to “Only You.” The findings point to private defaults, organizational inventories, external access testing and secret scanning in AI app builders.
Explore the original sources
Source date: 10 November 2026.
Published by AI Radar: 11 Nov 2026, 02:07 (Istanbul, UTC+3).
FOLLOW THE TOPIC
Topics and tags
Share your discovery.
Send this story to a friend.
Reader comments
What do you think about this development? Share your experience or question. Comments are published after editorial approval.
Your name/nickname and comment become public if approved. Read: Privacy notice.
Loading comments…