Publicly reachable ChatGPT projects

Last updated Oct 17, 2026 Preview Policies

AI summary

ChatGPT projects that are publicly accessible or shared with all members expose files, instructions, and connector scopes that could provide unauthorized access to services like Slack or Linear. Change sharing to invite-only in the settings and review the connector scopes.

Severity: High Information Oversharing Recommended Preview

What it detects

Detects ChatGPT projects reachable outside the workspace or by every member.

Why it matters

A project carries files, instructions and connector scopes, so an over-shared project exposes more than an over-shared GPT does - potentially a live path into Slack, Linear or Google Drive. Change its sharing to invite-only in the project's settings - the Admin API cannot change visibility, and Isolate only removes the people it was shared with by name - and check its connector scopes separately.

The rule

Every ChatGPT Project where Publicly Reachable is true

In Rencore Governance

Details

Applies to	ChatGPT project
Connector	ChatGPT Enterprise
Severity	High
Category	Information Oversharing
Recommended	Yes
Recommended automation	None
License type	Standard

Other policies that check ChatGPT project objects:

ChatGPT project with an inactive owner (Medium)
Over-shared project with external data sources (Critical)
Stale ChatGPT project (Low)

Frequently asked questions

What does the publicly reachable ChatGPT projects policy detect?

The Publicly reachable ChatGPT projects policy detects ChatGPT projects reachable outside the workspace or by every member.

Which objects does the publicly reachable ChatGPT projects policy check?

The Publicly reachable ChatGPT projects policy checks ChatGPT project objects from the ChatGPT Enterprise inventory and reports each one that matches its rule as a violation.

How severe is a violation of the publicly reachable ChatGPT projects policy?

Violations of the Publicly reachable ChatGPT projects policy have High severity. The policy is in the Information Oversharing category.

Which module includes the publicly reachable ChatGPT projects policy?

The Publicly reachable ChatGPT projects policy comes with the ChatGPT Enterprise connector (in preview) in the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.

Was this page helpful?