The Atlantic Responsible Disclosure Policy changes — first seen 2026-08-18 (NOTED)

What changed, in plain language

The only change is an updated obfuscation code in the security contact email link. The email address itself and all policy terms are unchanged.

This change appears to be cosmetic (formatting, typos, or contact details).

± CHANGEDSecurity contact email link code refreshed
The scrambled code behind the "email protected" contact link was regenerated. This is a routine spam-protection measure by the site's CDN. The policy text, the rules for researchers, and the exclusions all stay the same.
please reach out to [\[email protected\]](https://www.theatlantic.com/cdn-cgi/l/email-protection#5320363026213a272a13273b3632273f323d273a307d303c3e) to report any critical issues you may discover
please reach out to [\[email protected\]](https://www.theatlantic.com/cdn-cgi/l/email-protection#0b786e687e79627f724b7f636e6a7f676a657f626825686466) to report any critical issues you may discover

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 · Spamming
 · Social engineering (including phishing) of Atlantic Media staff or contractors
 · Any physical attempts against Atlantic Media property or data centers
+While we currently do not have a formal vulnerability reporting system in place at this time, please reach out to [\[email protected\]](https://www.theatlantic.com/cdn-cgi/l/email-protection#5320363026213a272a13273b3632273f323d273a307d303c3e) to report any critical issues you may discover. Thank you for helping keep The Atlantic and our users safe!
+While we currently do not have a formal vulnerability reporting system in place at this time, please reach out to [\[email protected\]](https://www.theatlantic.com/cdn-cgi/l/email-protection#0b786e687e79627f724b7f636e6a7f676a657f626825686466) to report any critical issues you may discover. Thank you for helping keep The Atlantic and our users safe!