--- title: "How to Pitch Dark Reading, CyberScoop, SC Media and The Record in 2026" description: "Each security trade outlet has a distinct editorial identity that generalist PR firms get wrong. A beat-by-beat guide with pitch format templates for each." author: "Shilika Jain" date: "2026-10-15T11:27:45.157+00:00" tags: ["cybersecurity pr", "security pr", "pr consultant", "media relations", "pitch strategy"] canonical: "https://www.shilikajain.com/blog/how-to-pitch-dark-reading-cyberscoop-sc-media-the-record-2026" --- # How to Pitch Dark Reading, CyberScoop, SC Media and The Record in 2026 By [Shilika Jain](https://www.shilikajain.com/authors/shilika-jain) - 10/15/2026 Each security trade outlet has a distinct editorial identity that generalist PR firms get wrong. A beat-by-beat guide with pitch format templates for each. --- # How to Pitch Dark Reading, CyberScoop, SC Media and The Record in 2026 Most security PR pitches fail before the reporter even opens them. Not because the technology is bad. Because the pitch treats four very different publications as interchangeable destinations for the same press release. I had a founder reach out recently, a cybersecurity-meets-blockchain team that had genuinely interesting research on how threat actors exploit cross-chain bridges. Their PR agency had sent the same pitch to Dark Reading, CyberScoop, SC Media, and The Record on the same morning. No replies. They came to me six weeks later wondering what had gone wrong. The answer is that these four outlets have almost nothing in common editorially except that they all cover cybersecurity. Getting placements across all four requires four different story architectures, four different pitch formats, and four different spokespeople in some cases. This guide breaks each one down. --- ## Dark Reading: The Practitioner Publication You Bring Findings To Dark Reading is not a trade press outlet you pitch announcements to. It's a practitioner publication you bring findings to. If your story doesn't teach a working security professional something new about how attackers operate or how defences fail, find a different outlet for it. The editorial team at Dark Reading is small, and editors cross-cover beats. The publication rewards research, not pitches. Editors are looking for threat findings, novel attack patterns, and practitioner-grade analysis, not product announcements. Stories that get picked up almost always have one of three things: original data the source gathered through their own research or telemetry; an observed attack or campaign that is active right now and has not been reported elsewhere; or a contrarian analysis of an accepted security assumption backed by evidence. Stories that get ignored: product launches, funding announcements, vendor partnerships, and survey results about how many CISOs are worried about something. **Contributed content at Dark Reading (the Commentary desk)** Dark Reading accepts contributed content and publishes it as "Commentary." The submission inbox is its own beast and it's been getting crushed by volume in 2026. A few things to know: - The outlet has two basic forms of contributed content: op-ed and thought leadership (Opinion, Technology Talk, Ask the Expert) - Target length is 750 words. Do not go over 800 words - All copy must be exclusive. No cross-posting from your own blog - Dark Reading explicitly does not accept AI-generated content, and their editors will catch it - Submit to [email protected] for commentary; paste the draft into the email body rather than attaching it - For news tips and research: [email protected] The pitch that works is not a press release with the product name removed. It is a short, technically specific summary of a finding, written in the language a security editor uses every day. Subject line format: the finding in plain English, no hype words, no product names, under 12 words. "New phishing campaign targeting APAC financial sector exploits ADFS token caching" beats "Vendor X discovers critical threat" every time. **Dark Reading pitch format:** ``` Subject: [technical finding in plain English, under 12 words] [One sentence: what you found, when, what it means for DR's readers.] - [Technical evidence bullet 1: named threat actors if attributable, specific malware family, CVE number] - [Technical evidence bullet 2: victim sectors, attack vectors observed] - [Technical evidence bullet 3: detection indicators, MITRE ATT&CK mapping] Why now: [one sentence on why this is active or relevant today] Available for an exclusive: [yes/no, embargo lift date if applicable] [Your name, title, response time available] ``` Dark Reading also runs Dark Reading Global, covering APAC, Middle East and Africa, and Latin America. If your research has a regional angle, pitch the regional desk directly rather than the main news desk. One important firewall: advertising and editorial are completely separated. Pitching a sponsored content inquiry to an editorial contact damages the relationship permanently. Keep the two tracks separate. --- ## CyberScoop: The Policy and Government Desk CyberScoop was built in Washington and it shows. The publication focuses on national-level cybersecurity policy, regulation, threat actors, and public-sector cyber strategy. Its editor-in-chief has said publicly that CyberScoop's specific differentiator is policy reporting: how the news of the day impacts federal agencies, what policymakers are deciding, and what the government is doing in response to major incidents. CyberScoop is the right outlet when your angle connects a technical finding to regulatory consequences, critical infrastructure exposure, or federal agency action. It's the wrong outlet when your angle is purely product-market fit or enterprise adoption metrics. The beats that get covered regularly: nation-state espionage and attribution, election security, CISA and FBI coordination on major incidents, critical infrastructure attacks (energy, water, manufacturing, industrial control systems), and federal procurement and modernization. CyberScoop has sister publications FedScoop, StateScoop, AIScoop, and DefenseScoop for more specific government verticals. One thing their editor-in-chief has said on the record: stop pitching annual predictions. Nobody on the CyberScoop desk runs a vendor's cybersecurity predictions roundup. Don't spend your credibility on it. The reporters at CyberScoop come from policy journalism backgrounds as much as from technical journalism. A pitch that reads like a CISA advisory gets further than one that reads like a product use case. **CyberScoop pitch format:** ``` Subject: [threat actor or incident name] + [government/agency/sector impact] [One to two sentences: the incident or finding and its policy consequence.] The connection to government: [CISA coordination? FBI advisory? Federal agency exposure? Critical infrastructure sector?] Why now: [Is this active? Is there pending legislation? Is there an agency response imminent?] Source available: [name, title, clearance to speak on record or background] [Your contact details and turnaround time] ``` If you don't have a government hook, don't force one. Pitch Dark Reading instead. --- ## SC Media: The CISO Governance Desk SC Media is the essential resource for CISO-level practitioners making governance and program-level decisions. It covers enterprise security programs, compliance, regulatory frameworks, board-level risk reporting, and the business implications of security strategy. Its Perspectives section publishes contributed opinion columns from the community. The audience SC Media is writing for is the CISO in a regulated enterprise: financial services, healthcare, critical infrastructure, defense contractors. That audience doesn't want to read about how cool your detection engine is. It wants to know what the risk framework looks like, how to answer the board, and what peer CISOs are doing about the same problem. SC Media's editorial compass: enterprise governance over technical specifics, risk quantification over attack taxonomy, program strategy over product evaluation. **The Perspectives section (contributed content)** SC Media Perspectives publishes opinion articles from the cybersecurity community, including technologists, researchers, practitioners, and analysts. Guidelines: - Keep submissions under 800 words - Include a proposed headline - Email the editors at scworld.com/contribute The Perspectives pieces that get accepted have a clear argument, a specific audience (the CISO or security program leader), and concrete examples from enterprise deployments. Pieces that get rejected are thinly rebranded product pitches. If you're pitching a news story rather than a byline, frame it as: what does this mean for enterprise security programs, compliance posture, or board-level risk reporting? **SC Media pitch format:** ``` Subject: [governance/compliance/program challenge] for [industry sector or CISO role] [One to two sentences: the enterprise security challenge and why it matters now.] Business impact: [risk quantification, regulatory consequence, or board-level implication] Why SC Media's audience: [this is specifically for CISOs in [sector] managing [program type]] Angle: [byline from a CISO or security program leader who has lived this, OR data from enterprise deployments] [Contact details] ``` --- ## The Record: Reporter-Driven Investigation, Not Contributed Content The Record from Recorded Future News operates differently from the other three. It does not run a community contributed content section. Its reporters drive the stories. Getting into The Record means becoming a source, not a submitter. The Record publishes reporter-driven news and investigations on cybersecurity and intelligence: nation-state threat actors, ransomware gang activity, critical infrastructure incidents, geopolitical dimensions of major breaches, and behind-the-scenes access to the people shaping cyber policy and the underground. The reporting leans investigative. The staff has backgrounds in national security journalism, intelligence reporting, and policy coverage. This is not an outlet where you pitch your funding round or your new product category. The Record picks up a story because a reporter decided to investigate it, not because a PR person sent a well-crafted pitch deck. The most credible entry point for a security startup is as a quoted expert source commenting on a breaking incident in your space, not as the subject of a feature. Build the relationship by being useful when reporters are working a story, not by pitching them your news. If you have a legitimate news tip for The Record, the angle that gets a response is: "Here is something happening right now that your readers don't know about yet, and here is why it matters." Original threat intelligence, a new ransomware variant you've observed in the wild, a zero-day with geopolitical implications. **The Record outreach format (it's not a pitch deck, it's a tip):** ``` Subject: [what is happening] - tip for [reporter name who covers this beat] [Two to three sentences: what you've observed, what the evidence is, and why this is a story The Record hasn't run yet.] I can provide: [samples, telemetry, a source who can go on background, a named analyst] I'm not asking for coverage of my company. I'm flagging something your audience needs to know. [Your name and contact] ``` The last line matters. Reporters at The Record get many pitches from people who say they're providing a news tip but are actually angling for a company mention. Being direct that you're not asking for a profile separates you from 90% of the inbox. --- ## The Mistakes That Get You Ignored Across All Four **Sending the same pitch to all four outlets simultaneously.** Each desk has a different editorial identity. A pitch built for CyberScoop's government angle will be irrelevant to Dark Reading's practitioner audience. A pitch built for SC Media's governance frame has no home at The Record. One pitch, four outlets = four rejections. **Pitching announcements instead of findings.** Funding rounds, new product launches, and partnership announcements are not stories for any of these four outlets unless they are attached to something with genuine news value for that desk's specific audience. If you're a seed-stage startup and your Series A announcement is the story, it belongs in a startup media outlet, not in a security trade publication. **Wrong spokesperson for the outlet.** Dark Reading wants your threat researcher. SC Media wants your CISO or a CISO customer. CyberScoop wants someone who can speak to the policy and government dimension. The Record wants someone who can go on background with real intelligence. **AI-generated pitches.** Dark Reading has a strict no-AI editorial policy and their editors will spot generated language in the pitch itself and treat it as a signal about the credibility of everything you're offering. **Pitching to the full team as a CC list.** Dark Reading's playbook note applies broadly: pick one editor by name, match your research to their beat. Blast the full team and you'll be ignored by all of them. --- ## How to Sequence Coverage Across All Four For a security startup with a genuine threat research asset, the sequencing I use: 1. **Dark Reading first** for the technical practitioner angle, usually with an exclusive or a short embargo 2. **The Record** with a news tip if the research has threat actor attribution or geopolitical dimensions 3. **CyberScoop** if there's a government or critical infrastructure exposure tied to the research 4. **SC Media Perspectives** a few weeks later with a CISO-focused op-ed drawing out the program and governance implications This sequence means the same research asset generates four pieces of coverage across four audience segments without cannibalizing any single outlet's exclusive angle. The research has to come first. The pitch follows the credibility, not the other way around. > agree w this 100%, it's a relationship game > > [Shilika Jain on X, 13 Aug 2025](https://x.com/Shilika_jain/status/1955609025514778823) That quote is from a conversation about how PR professionals spend months building reporter relationships before a single placement lands in under an hour. Security trade press is the same. You're not buying a placement with a well-formatted pitch. You're activating a relationship you've built over time by being useful, credible, and on-beat. If you're a security founder who needs tier-1 coverage before your next raise or launch, the gap between knowing this framework and executing it is usually where a senior operator earns their retainer. [Book a 30-min teardown with Shilika](https://calendly.com/shilikajain/30min/) --- **Book a 30-min teardown with Shilika** - https://calendly.com/shilikajain/30min/ Canonical: https://www.shilikajain.com/blog/how-to-pitch-dark-reading-cyberscoop-sc-media-the-record-2026