Grok Bot brings persistent AI workers under enterprise controls

SpaceXAI made Grok Bot available to enterprise customers on September 3. Grok and Cursor Enterprise customers receive two weeks of free usage from the announcement and can invite their entire organization, including people without an existing seat. The announcement did not state pricing after the offer.

Work continues beyond a chat session

Grok Bot centers its interface on persistent AI teammates that can carry delegated jobs through apps and websites. A user can demonstrate a workflow, correct it, save it as a repeatable routine, and share a successful setup as a template. Bots can also exchange messages and context, while scheduled or event-triggered routines can begin without a new prompt.

The security boundary sits between users

SpaceXAI says each user’s work runs in an environment isolated from other users, and a Bot has no account access until the user signs it in. Cursor’s documentation adds an important limit: all Bots owned by one user share that user’s cloud computer, so a login or file there may be available to every Bot run by that user. Stronger separation requires a different user and computer boundary.

Admin controls need deliberate setup

Network Controls are limited to Enterprise plans, and teams without a network policy allow all destinations by default; admins can instead define a destination allowlist. Action Recording is also off by default, and its events do not appear in dashboard Audit Logs. Organizations that need those events in their monitoring systems must use OpenTelemetry Export. Connector and network policies remain separate, so blocking a plugin alone does not block its corresponding website.