Responsible Disclosure Policy

NOTED
FIRST SEEN 2026-08-31 · VERSION 20260831_rev01 · COMPARED WITH 20260830_rev01

What changed, in plain language

The only change is a new scrambled email link for reporting security issues — the address behind Cloudflare's email-protection encoding was re-encoded. The policy text itself is identical.

This change appears to be cosmetic (formatting, typos, or contact details).

Changelog

  1. ± CHANGEDSecurity contact email link re-encoded

    The link people use to report a security problem was updated. The Atlantic hides this email address behind Cloudflare's scrambling tool, and the scrambled version changed. Nothing about the policy, the rules for researchers, or what you can report changed.

    please reach out to [\[email protected\]](https://www.theatlantic.com/cdn-cgi/l/email-protection#4e3d2b2d3b3c273a370e3a262b2f3a222f203a272d602d2123) to report any critical issues you may discover

    please reach out to [\[email protected\]](https://www.theatlantic.com/cdn-cgi/l/email-protection#f18294928483988588b185999490859d909f859892df929e9c) to report any critical issues you may discover

Full text changes — 20260830_rev01 to 20260831_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

1717· Spamming
1818
1919· Social engineering (including phishing) of Atlantic Media staff or contractors
2020
2121· Any physical attempts against Atlantic Media property or data centers
2222
23While we currently do not have a formal vulnerability reporting system in place at this time, please reach out to [\[email protected\]](https://www.theatlantic.com/cdn-cgi/l/email-protection#4e3d2b2d3b3c273a370e3a262b2f3a222f203a272d602d2123) to report any critical issues you may discover. Thank you for helping keep The Atlantic and our users safe!
23While we currently do not have a formal vulnerability reporting system in place at this time, please reach out to [\[email protected\]](https://www.theatlantic.com/cdn-cgi/l/email-protection#f18294928483988588b185999490859d909f859892df929e9c) to report any critical issues you may discover. Thank you for helping keep The Atlantic and our users safe!