Skip to content

Responsible Disclosure Policy

The only change is a new scrambled version of the same email address link (Cloudflare's email-protection encoding). No policy terms changed.

Cosmetic change: formatting, typos, or contact details.

20260819_rev01 → 20260820_rev01COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
1717· Spamming
1818
1919· Social engineering (including phishing) of Atlantic Media staff or contractors
2020
2121· Any physical attempts against Atlantic Media property or data centers
2222
23While we currently do not have a formal vulnerability reporting system in place at this time, please reach out to [\[email protected\]](https://www.theatlantic.com/cdn-cgi/l/email-protection#1b687e786e69726f625b6f737e7a6f777a756f727835787476) to report any critical issues you may discover. Thank you for helping keep The Atlantic and our users safe!
23While we currently do not have a formal vulnerability reporting system in place at this time, please reach out to [\[email protected\]](https://www.theatlantic.com/cdn-cgi/l/email-protection#780b1d1b0d0a110c01380c101d190c1419160c111b561b1715) to report any critical issues you may discover. Thank you for helping keep The Atlantic and our users safe!
± CHANGEDContact email link re-encoded

The security contact link now uses a different scrambled code. This is just how the site hides the email address from spam bots — the address itself and everything else in the policy stayed the same.