generated: '2026-09-19'
method: searched
probe: true
policy: []
contact:
- mailto:security@coinrailz.com
evidence:
- source: https://coinrailz.com/.well-known/agent.json
  kind: agent-manifest securityContact field
probed:
- url: https://coinrailz.com/.well-known/security.txt
  status: 404
- url: https://coinrailz.com/security.txt
  status: 200
  note: SPA shell, not a security.txt
- url: https://coinrailz.com/security
  status: 200
  note: client-rendered route; body is the SPA shell, no disclosure keywords readable
note: A security contact is published in a machine-readable manifest but no disclosure policy, bug-bounty programme
  or security.txt exists, so no Security pointer is emitted.