Responsible Disclosure Policy

NOTED
FIRST SEEN 2026-08-15 · VERSION 20260815_rev01 · COMPARED WITH 20260814_rev01

What changed, in plain language

The only change is the scrambled code in the link to The Atlantic's security contact email. The email address itself is unchanged (security@theatlantic.com) — the site just re-scrambled it, which is normal anti-spam behavior. No policy terms changed.

This change appears to be cosmetic (formatting, typos, or contact details).

Changelog

  1. ± CHANGEDSecurity contact link re-encoded (same email address)

    The Atlantic hides its security email behind a scrambling code so spam bots can't read it. That code was regenerated, so the link text looks different. Decoding both the old and new versions gives the exact same address, and nothing about the policy itself changed.

    please reach out to [\[email protected\]](https://www.theatlantic.com/cdn-cgi/l/email-protection#6516000610170c111c25110d00041109040b110c064b060a08) to report any critical issues you may discover.

    please reach out to [\[email protected\]](https://www.theatlantic.com/cdn-cgi/l/email-protection#81f2e4e2f4f3e8f5f8c1f5e9e4e0f5ede0eff5e8e2afe2eeec) to report any critical issues you may discover.

Full text changes — 20260814_rev01 to 20260815_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

1717· Spamming
1818
1919· Social engineering (including phishing) of Atlantic Media staff or contractors
2020
2121· Any physical attempts against Atlantic Media property or data centers
2222
23While we currently do not have a formal vulnerability reporting system in place at this time, please reach out to [\[email protected\]](https://www.theatlantic.com/cdn-cgi/l/email-protection#6516000610170c111c25110d00041109040b110c064b060a08) to report any critical issues you may discover. Thank you for helping keep The Atlantic and our users safe!
23While we currently do not have a formal vulnerability reporting system in place at this time, please reach out to [\[email protected\]](https://www.theatlantic.com/cdn-cgi/l/email-protection#81f2e4e2f4f3e8f5f8c1f5e9e4e0f5ede0eff5e8e2afe2eeec) to report any critical issues you may discover. Thank you for helping keep The Atlantic and our users safe!