WellrailBot

WellrailBot visits a website only when someone asks Wellrail to scan it. It identifies itself as WellrailBot/1.0 (+https://wellrail.com/bot).

A free scan reads up to 15 public pages (homepage, safety, terms and privacy pages), the response headers, and the site's own JavaScript files. It doesn't log in, submit forms, or send attack traffic.

It obeys robots.txt. To block it, add:

User-agent: WellrailBot
Disallow: /

Active security testing happens only in a paid audit, after the site owner verifies the domain and signs a testing authorization.

Questions or abuse reports: security@wellrail.com