An Open Question for Secretary General Rutte and President Erdogan: Who Is Responsible for Leaving the Gate Open?

Let us be precise about the nature of this question. We are not asking whether the summit is well-organized in physical terms — the 40,000 security personnel, the motorcade protocols, the venue preparation at the Presidential Complex are, by all accounts, extensive. We are not asking whether Turkey is a capable host. We are asking something simpler, and something that the people responsible for this summit have so far declined to answer.

We are asking: in an alliance that published lessons from Vilnius, that elevated cyber security to a domain of operations at Warsaw, that has devoted significant portions of its new defense investment commitments to cyber resilience — how did the primary domain name of its most important summit in years remain unregistered for the better part of a year?

"Reputation cannot be saved on a budget. But in this case, reputation was not even on the budget. The 'Ankara Summit' was the name everyone used — from Anadolu Agency to the Atlantic Council to the Financial Times. ankarasummit.org was the address that name pointed to. And it was open, unguarded, and available to anyone with $50 and an internet connection."

The Question for Secretary General Rutte

Mark Rutte has spent his tenure as NATO Secretary General demonstrating a sophisticated understanding of communication strategy. The "Trump Trillion" charts. The Oval Office visits. The careful management of alliance messaging across 32 different national media environments. He understands, better than most, that the information environment around a NATO summit is a strategic asset — that what people see, read, and search when they look for the summit shapes how they understand the alliance's purpose and credibility.

He also told Anadolu Agency on July 1 that Ankara "should mark delivery and implementation for NATO." Delivery. Implementation. These are words that mean: we said we would do something, and we did it.

The question for Secretary General Rutte is direct: Did NATO's communications and cyber security apparatus have a protocol for registering summit-associated domain names after Vilnius? If yes — why did it fail for Ankara? If no — why not, given that the Vilnius gap was documented and its exploitation was recorded? And when four formal notifications identified this failure through official channels, why did his office not respond?

The Question for President Erdogan

Turkey's Communications Directorate is one of the most sophisticated government communications operations in the region. It manages the president's domestic and international messaging across dozens of platforms, coordinates with state media, and has demonstrated considerable capacity for rapid digital response when the situation demands it.

Anadolu Agency — the state news agency that operates under the Communications Directorate's ecosystem — published a headline on July 1 reading "Ankara Summit should mark delivery and implementation." The phrase "Ankara Summit" appeared in the headline of the official state news service of the host country. At the moment that headline was published, ankarasummit.org was controlled not by Turkey's Communications Directorate, not by the Presidential Complex, not by any official institution — but by an independent researcher who had filed four formal notifications through CİMER that went unanswered.

The question for President Erdogan is equally direct: Turkey's Communications Directorate spent 181 million lira on 4,434 summit billboards reading "Key to Peace." It coordinated the Ay Yildiz headquarters opening for allied delegations. It managed the taxi driver uniform protocol. Who in that apparatus was responsible for the digital identity of the summit? Why was that responsibility not discharged? And why did four formal CİMER notifications — the official presidential communication channel — receive no substantive response?

The PR Loss — Who Owns It

There is a public relations dimension to this failure that is separate from the security dimension, and it deserves to be named directly. The "Ankara Summit" brand — the name that Anadolu Agency uses, that NATO uses, that the international press uses — is now associated, in the indexed record of the internet, with an independent platform that has documented accreditation denials, pre-summit detentions, a 15-day demonstration ban, two account suspensions, and a formal Declaration of Digital Defense challenging the institutional competence of both NATO and the host government.

This is not this platform's doing. This platform registered the domains because the institutions responsible did not. It built the platform because the name was available. It published the documentation because the documentation existed and no official institution had claimed the space. The association between "Ankara Summit" and independent critical coverage is a direct consequence of the institutional failure to register the name.

In PR terms: if you do not own your own name, someone else will define it. That is not a lesson from this platform. That is a lesson from every communications textbook ever written. "Reputation cannot be saved on a budget" — the phrase this platform has been using since its founding — applies with full force to the institutions that failed to spend $50 registering the name they had already decided to use for their most consequential summit in years.

To the Journalists in Ankara on July 7

This platform will not be in the room on July 7. Its accreditation was not applied for through a process it trusts to be neutral. But the journalists who will be in the room — including some from the nine organizations denied accreditation whose colleagues are present through other channels — have the ability to ask a question that this platform cannot.

We invite them to ask it: At the press conference, in the margins, in the briefing room — ask Secretary General Rutte and ask President Erdogan's spokesperson: who was responsible for the digital identity of the Ankara Summit? Why was ankarasummit.org left unregistered after Vilnius? Why did four formal notifications receive no response? And what does that say about the gap between NATO's strategic cyber commitments and its operational practice?

The summit opens in five days. The question is on the record. We are curious what answer they will give.

Reputation cannot be saved on a budget. The budget was there. The decision was not.