A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:relx-vdp-ess@submit.bugcrowd.com
Contact: mailto:security@lexisnexis.com
Expires: 2025-04-09T16:30:00.000Z
Encryption:
https://lexisnexis.co.nz/gpg_disclosure_public.txt
Preferred-Languages: en
Canonical:
https://lexisnexis.co.nz/.well-known/security.txt
Hiring:
https://www.lexisnexis.com/en-us/about-us/careers.page
-----BEGIN PGP SIGNATURE-----
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=G4tR
-----END PGP SIGNATURE-----