A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:relx-vdp-ess@submit.bugcrowd.com
Contact: mailto:security@lexisnexis.com
Expires: 2025-04-09T16:30:00.000Z
Encryption:
https://lexisnexis.co.uk/gpg_disclosure_public.txt
Preferred-Languages: en
Canonical:
https://lexisnexis.co.uk/.well-known/security.txt
Hiring:
https://www.lexisnexis.com/en-us/about-us/careers.page
-----BEGIN PGP SIGNATURE-----
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=uRlD
-----END PGP SIGNATURE-----