A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:relx-vdp-ess@submit.bugcrowd.com
Contact: mailto:security@lexisnexis.com
Expires: 2025-04-09T16:30:00.000Z
Encryption:
https://lexisnexis.co.in/gpg_disclosure_public.txt
Preferred-Languages: en
Canonical:
https://lexisnexis.co.in/.well-known/security.txt
Hiring:
https://www.lexisnexis.com/en-us/about-us/careers.page
-----BEGIN PGP SIGNATURE-----
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=sp8A
-----END PGP SIGNATURE-----