# Organizations Assess Grok App Access

A security report found 35,578 apps built with Grok accessible to anyone with a link; in the author’s testing, 94.7% of live apps opened without sign-in. The report says apps exposed information from 30 identifiable organizations and included 24 associated with SpaceXSI and X staff, which were taken down after the report. The signals identify no government agency, contract, or direct public-sector procurement opportunity, but the findings are relevant to agencies and contractors evaluating AI app-building tools and managing employee-created applications.

- Organizations using or evaluating these tools can inventory employee-built apps and review their access settings and exposed information, as the report recommends.
- Procurement teams can use the findings to assess default access controls and security protections when evaluating AI app-building products; the signals do not establish a specific mandate or compliance deadline.
- Contractors handling sensitive information should account for employee-created apps when reviewing their organization’s exposure, since link-based access may not require sign-in.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Artificial Intelligence
**Published:** November 11, 2026

### Vendors
- SpaceXSI (Organization whose staff created apps reported as accessible by link)
- X (Organization whose staff created apps reported as accessible by link)

### Key Quotes
> We opened the first page of each Grok app address once, with no account.
> — Original poster

### Sources
- [A security firm found 35,578 apps built with Grok open to anyone with the link, 24 of them built by SpaceXSI's own staff. The company took its 24 down. Who tells the other 30 organizations? https://t.co/7soCaqtHEE](https://x.com/zaibatsu/status/2120566747732615516) - twitter-defense
- [Grok Build apps default to "Anyone with the link": 94.7% of live apps we tested opened without sign-in, including SpaceXSI's own sales dat](https://www.reddit.com/r/cybersecurity/comments/1xszgky/grok_build_apps_default_to_anyone_with_the_link) - reddit-cybersecurity