A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:relx-vdp-ess@submit.bugcrowd.com
Expires: 2024-07-01T16:00:00.000Z
Encryption: https://lexisnexis.com/gpg_disclosure_public.txt
Preferred-Languages: en
Canonical: https://lexisnexis.com/.well-known/security.txt
Hiring: https://www.lexisnexis.com/en-us/about-us/careers.page
-----BEGIN PGP SIGNATURE-----
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=syqe
-----END PGP SIGNATURE-----