Claroc says 35,578 Grok apps opened with no sign-in

Claroc says 35,578 of 37,571 Grok apps that were still online opened with no sign-in. That is 94.7 percent. The research post is dated from work on November 8, 2026, and it says SpaceXSI took down 24 staff apps after the report.

The count comes from a sweep of grok.me addresses. Claroc says it tried 43,551 addresses and found 37,571 still online. Of those, 35,578 opened for anyone. It says 1,993 answered with an access error, the response it associates with apps limited to the owner or to invited users. In the account the researchers used, the publish step proposed Anyone with the link as the access setting.

Claroc says 24 of the open apps were built by SpaceXSI and X staff. It lists a confidential onboarding plan for a new enterprise sales hire, a sales territory map of 594 accounts, and advertising proposals. The onboarding plan, the post says, included systems to open in the first week, internal addresses, sales tools, 19 internal chat channels, and a 30-day plan. The post says nothing asked the researchers to sign in.

Claroc says SpaceXSI described a different starting point. The post says SpaceXSI told it that employees' apps start out private. Claroc says those staff apps were still open to anyone, and that SpaceXSI removed them after the report. It says SpaceXSI has not taken the same step for apps other Grok users left open.

The post says most open apps were ordinary pages. Claroc says most were games, landing pages, and calculators. It says about 1 in 10 held sensitive, internal, or personal material, and that it estimates roughly 2 percent rated high or critical by its own scale. It says it confirmed some of those by hand, including a hospital roster and a timesheet file that held passwords in plain text. Those details are the research post's findings, not a company admission.