Skip to content

Project

Grok Build

Grok Build is xAI's (SpaceXAI's) coding agent and command-line tool, which runs Grok models as an agentic coding harness on a developer's local repositories.

Known aliases

  • Build Mode
  • Grok Build CLI
  • Grok Build Mode

Current stories

buildConfirmed8 publishers

Cursor's task-cost table shrinks Grok 4.7's 7.5x list-price gap to about 1.9x

SpaceXAI lists Grok 4.7 at $2 and $6 per million tokens against $10 and $50 for GPT-6 Astra and Claude Fable 5.1, and the only per-task figures in the record put a Cursor run at $4.69 against about $9.

Perspective Coverage

8 publishers
Builder
Builder 51%
Operator
Operator 32%
Investor
Investor 17%

Reality

Evidence60
Adoption30
Hype gap+25
Incentives65
Confidence58
buildOne report1 publisher

Zetaris Cloud routes AI agents' queries to enterprise data where it already lives

Zetaris has launched a cloud harness that lets AI agents query enterprise data in place, citing cost savings of up to 67 percent at one customer. The figure is Zetaris' own before-and-after assessment, so buyers need their own numbers to know if it applies.

Publishers:runtimewire.com

Reality

Evidence30
Adoption8
Hype gap+45
Incentives75
Confidence40
buildOne report1 publisher

Grok 4.7 doubles cost per task at an unchanged per-token price

Grok 4.7 keeps Grok 4.6's $2/$6 token price yet costs $3.74 per task against $1.86, by Artificial Analysis' measurement. Teams that budget from the price sheet will undercount agent spend until they measure tokens per task on their own work.

Publishers:dev.to

Reality

Evidence58
Adoption
Not scored
Hype gap+45
Incentives55
Confidence55
securityConfirmed4 publishers

Meta ads steer Android users to fake Google Play pages carrying the RemControl banking trojan

Group-IB says the RemControl Android banking trojan reaches bank customers in six countries and the Middle East via Meta ads and fake Google Play pages. Its server address sits in a Telegram dead-drop, so the operator can move infrastructure without a new build.

Perspective Coverage

4 publishers
Builder
Builder 34%
Operator
Operator 59%
Investor
Investor 7%

Reality

Evidence65
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence65
investConfirmed3 publishers

Hundreds of failed uploads exposed ZCode's 313-megabyte bundle of a developer's repository

Zhipu AI says repository data left only while a project description page was being generated, and that the behaviour is fixed. The developer who found it says earlier versions sent data on every query, and some companies have stopped using ZCode.

Perspective Coverage

3 publishers
Builder
Builder 43%
Operator
Operator 32%
Investor
Investor 25%

Reality

Evidence60
Adoption
Not scored
Hype gap+15
Incentives60
Confidence62
securityOne report1 publisher

Wire-level teardown puts Grok Build's privacy opt-out downstream of the upload

The independent checker cereblab captured grok 0.2.93 sending a never-read repository to a Google Cloud Storage bucket. The privacy opt-out xAI shipped afterwards governs retention, cereblab says, while the same bytes still leave the machine.

Publishers:gist.github.com

Reality

Evidence66
Adoption45
Hype gap−8
Incentives58
Confidence62
investOne report1 publisher

Grok 4.7 buys 5.9 points of CursorBench at Grok 4.6's token price

xAI built Grok 4.7 on a larger base model with a longer reinforcement-learning run and kept the API at Grok 4.6's rates. The open question for buyers is how many tokens the longer runs burn.

Reality

Evidence34
Adoption22
Hype gap+28
Incentives82
Confidence46
productOne report1 publisher

Z.ai open-sources ZCode with the uploading code gone from a two-commit history

Two outside bodies reported ZCode's cloud storage bucket empty, and the researcher who found the problem confirms the upload pipeline is gone. The repository Z.ai published holds two commits and not the code that did the uploading.

Publishers:thenextweb.com

Reality

Evidence64
Adoption46
Hype gap+32
Incentives74
Confidence61
buildOne report1 publisher

Claude Code's per-repository memory store lost a rule set for all projects

Both terminal agents recalled planted facts inside a single project across three two-session tests on identical Node repos. Only Grok Build carried a stated convention into an unrelated repo, at about a third of the reported cost.

Publishers:thenewstack.io

Reality

Evidence58
Adoption25
Hype gap+14
Incentives40
Confidence62
productOne report1 publisher

Grok Bot ties write access to Gmail and Salesforce to a personal paid seat

Engadget says SpaceXAI's agent signs into Gmail, LinkedIn and Salesforce and acts for the user, with eligibility running through six individual paid tiers. The only brake described is a human-approval setting.

Publishers:engadget.com

Reality

Evidence30
Adoption15
Hype gap+20
Incentives55
Confidence35
productOne report1 publisher

ZCode encrypted a developer's Git history with a key only Z.ai's servers hold

A developer found a 313MB archive of his commercial project queued for upload and could not open it, because the private key sits on Z.ai's back end. Z.ai says the data is destroyed once the page is built.

Publishers:thenextweb.com

Reality

Evidence64
Adoption38
Hype gap+30
Incentives68
Confidence58
buildOne report1 publisher

A repo's core.fsmonitor setting turns an agent's routine git status into code execution

GitSpawn, as summarised in a dev.to write-up of Cloud Security Alliance findings, uses a Git performance setting to run attacker code when a coding agent inspects a project it just opened. Seven agents are named.

Publishers:dev.to

Reality

Evidence32
Adoption
Not scored
Hype gap+18
Incentives28
Confidence40
buildOne report1 publisher

Opening an untrusted repo made seven coding agents run the program its Git config named

Manifold Security's GitSpawn findings cover eight issues across seven coding agents. The path runs through core.fsmonitor, where a background git status starts a helper the repository chose, outside the agent's sandbox and with no prompt.

Publishers:dev.to

Reality

Evidence34
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence38
buildOne report1 publisher

A wiki that accepted GET as an edit gave read-only agents 18,000 writes

The wiki's old software took a plain GET as an edit, so a harness that policed request types could not stop the writes. GitSpawn puts the same gap in the startup git calls of seven coding agents.

Publishers:dev.to

Reality

Evidence42
Adoption52
Hype gap+30
Incentives78
Confidence45
buildOne report1 publisher

Grok 4.6 reaches Foundry, and xAI's fourth catalog in 14 days turns model choice into a purchase order

Two weeks after release, Grok sits in Microsoft's, Amazon's and Google's catalogs. The Foundry listing is a public preview, which is not what the Bedrock deployment got.

Publishers:runtimewire.com

Reality

Evidence42
Adoption55
Hype gap+22
Incentives72
Confidence50
buildOne report1 publisher

Grok Build's real product is the X timeline, not the code generator

SpaceXAI opened its prompt-to-app builder to every Grok plan on August 19 and wired publishing straight into the X feed. The pressure on rivals lands on distribution.

Publishers:runtimewire.com

Reality

Evidence33
Adoption20
Hype gap+22
Incentives72
Confidence44
buildOne report1 publisher

Four frontier models in four days, and the cheapest number in your agent plan has an expiry date

Grok 4.6, Gemini 3.7 Flash, DeepSeek V4 Pro and GLM-5.3 all chase agents that stay on task. The pricing underneath them is moving faster than the benchmarks.

Publishers:dev.to

Reality

Evidence58
Adoption55
Hype gap+12
Incentives68
Confidence48
buildOne report1 publisher

SpaceXAI's new Grok terms make "indirect competitor" a deployment risk

The revised acceptable use policy, dated August 14, 2026, bars customers from assisting anyone building products that compete with SpaceXAI, directly or indirectly. Enforcement runs to termination.

Publishers:runtimewire.com

Reality

Evidence42
Adoption28
Hype gap+18
Incentives68
Confidence45