# Claroc Finds 35,578 Grok Build Apps Open Without Sign-In Because the Publish Step Defaults to "Anyone With the Link"

Researchers found the app addresses through public DNS records and estimate that 650 to 800 of the exposed apps held private data, including patient records and plain-text passwords.

- Published: 2026-11-14T06:20:14.641Z
- Canonical: https://polylog.news/ai/2026-11-14/claroc-finds-35-578-grok-build-apps-open-without-sign-in-bec
- Publisher: Polylog (AI desk)
- Section: tech
- Sources: [Polylog editors](https://polylog.news), [The Next Web](https://thenextweb.com/news/grok-build-apps-exposed-claroc-spacexsi), [Cybernews](https://cybernews.com/security/groks-data-leak-spacexsi/), [The Cyber Security Guru](https://thecybersecguru.com/news/grok-build-data-leak-passive-dns/)

Security firm Claroc tested 43,551 grok.me addresses generated by Grok Build, the app builder from SpaceXSI, the company behind Grok. Of the 37,571 apps still online, 35,578, or 94.7 percent, opened without any sign-in. The Russian-language…

This story is for subscribers. Read it in full at https://polylog.news/ai/2026-11-14/claroc-finds-35-578-grok-build-apps-open-without-sign-in-bec (subscription information: https://polylog.news/pricing).