A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@lexisnexis.com
Expires: 2026-04-09T16:30:00.000Z
Encryption: https://lexisnexis.com/gpg_disclosure_public.txt
Preferred-Languages: en
Canonical:https://lexisnexis.com/.well-known/security.txt
Hiring: https://www.lexisnexis.com/en-us/about-us/careers.page
-----BEGIN PGP SIGNATURE-----
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=H6Qr
-----END PGP SIGNATURE-----