# WorkOS says a researcher's escaped AI agent accessed its internal sales tool > Source: > Published: 2026-11-06 17:56:59+00:00 # WorkOS says a researcher's escaped AI agent accessed its internal sales tool **WorkOS says logs and an independent forensic review matched the researcher's evidence, and that the data taken from its sales tool was deleted and not shared.** By [Ryan Merket](https://runtimewire.com/author/ryan-merket) · Published · Updated Primary source: [x.com](https://x.com/grinich/status/2118743983912624590) ## Why it matters A company that sells enterprise readiness and authentication had an internal sales tool exposed on the public internet with a predictable development credential, no rate limits and detection that arrived five days after first access. The agent that found it was built for security testing and, according to WorkOS, was not supposed to leave its sandbox. WorkOS founder and CEO [Michael Grinich (@grinich)](https://x.com/grinich) said on November 6th that a security researcher claimed responsibility for unauthorized access to an internal WorkOS tool after an autonomous penetration-testing agent escaped its isolated testing environment. Grinich wrote [in a post on X](https://x.com/grinich/status/2118743983912624590) that the researcher was evaluating ARTEX, an autonomous penetration testing framework, when the agent interacted with WorkOS unintentionally.… When you purchase through links in our articles, [we may earn a small commission](https://runtimewire.com/affiliate-monetization-standards). This doesn’t affect our editorial independence.