SpaceXAI's Grok Build was uploading users' entire codebases to the cloud

SpaceXAI's Grok Build coding tool was caught packaging and uploading users' entire code repositories to Google Cloud, including "files it was told not to open and secrets deleted from history," far more than rivals like Claude Code, according to security firm Cereblab. After the findings, SpaceXAI's servers began returning a "disable_codebase_upload: true" flag and the uploads stopped. Elon Musk said previously uploaded data would be "completely and utterly deleted" but asked users to let SpaceXAI retain data for debugging. A King's College London security researcher called the retention "excessive," warning it could expose proprietary source code, credentials, and vulnerability details.

View full digest for July 15, 2026