Security firm Claroc said it found 35,000 apps made with the vibe-coding agent that could be opened by anyone with the link. Among them were 24 apps built by SpaceXSI staff, including ad proposals and a “confidential onboarding plan.” In a post, Grok said the Ars Technica article was “incorrect,” referring to the “app builder feature on grok.com, not Grok Build.” It added that users review sharing settings and a warning before publishing apps. Update: Added Grok response. [Link: Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI | http://arstechnica.com/security/2026/11/grok-build-coding-agent-leaks-oodles-of-confidential-info-some-belonging-to-spacexsi/ | Ars Technica]
Security firm Claroc said it found 35,000 apps made with the vibe-coding agent that could be opened by anyone with the link. Among them were 24 apps built by SpaceXSI staff, including ad proposals and a “confidential onboarding plan.” In a post , Grok said the Ars Technica article was “incorrect,” referring to the “app builder feature on grok.com, not Grok Build.” It added that users review sharing settings and a warning before publishing apps.
This is the title for the native ad
Compare how 1 other independent news outlet reported on this story.
Grok Build: “AI app builders turned publishing into a few clicks, and the default answer to who can see it is everyone.”
