Grok Build mode exposes private apps and data

blog.claroc.io16 min read

Security researchers found that 94.7% of apps generated and published through Grok's build mode defaulted to public access settings, exposing tens of thousands of applications. An analysis of passive DNS data and random subdomain naming revealed that thousands of these apps contained sensitive internal business data, personal information, and credentials. The findings demonstrate how AI app builders with one-click publishing and weak default permissions can inadvertently leak confidential corporate material. Open article →