# 119-hr-6315: SECURE IT Act

119-hr-6315, SECURE IT Act, is a 119th Congress bill sponsored by Rep. Valadao, David G. [R-CA-22] (R-CA); status introduced (as of 2026-04-21).

- Canonical: https://policyrisk.com/legislation/119-hr-6315
- As of: 2026-04-21
- Plain-text twin of the page above; the HTML and this file carry the same facts.

## Facts
- Bill: 119-hr-6315
- Congress: 119
- Title: SECURE IT Act
- Status: introduced
- Introduced: 2025-11-25
- Sponsor: Rep. Valadao, David G. [R-CA-22] (R-CA)
- Cosponsors: 1
- Policy area: Government Operations and Politics
- Touches household money: no
- Last recorded action: 2026-04-21

## Summary

**This bill would strengthen election cybersecurity by requiring** **penetration testing of voting systems and creating a five-year independent vulnerability disclosure pilot for election systems**. It lays out who can test, how researchers are vetted, how vendors must respond to flaws, and legal safe harbors for participants. - Election system vendors would be able to opt into a voluntary pilot to make machines and source code available to vetted researchers. Vendors must patch or mitigate disclosed vulnerabilities and notify relevant State and local election officials and federal election agencies. - Cybersecurity researchers would undergo vetting, including background checks, before participating and would receive legal safe harbors from the Computer Fraud and Abuse Act and DMCA anti-circumvention rules. Vulnerabilities found under the program are exempt from Freedom of Information Act requests. - Accredited testing labs and standards bodies would be required to include penetration testing in voting system certification. The National Institute of Standards and Technology Director would recommend testing entities and the Election Assistance Commission would vote on their accreditation. - The program would set timelines for handling disclosures. Vulnerabilities must stay confidential for 180 days after notification and patches for certified systems get an expedited 90-day review window, after which an uncompleted review is deemed certified.

## Cosponsors (1)

- Rep. Deluzio, Christopher R. [D-PA-17] (D-PA), 2025-11-25T00:00:00.000Z

## Provisions PRIA read

- Five-year election security testing program: benefit, high. This bill would create a 5‑year, voluntary program for vetted security researchers to test election systems, including source code. Vendors could share systems for testing; researchers would be background‑checked and must report flaws to the vendor, the Commission, and the Secretary of Homeland Sec…
- Required penetration tests for voting systems: benefit, high. This bill would require accredited penetration testing as part of testing, certification, decertification, and recertification of voting hardware and software. NIST would recommend and certify labs for this work, and the Election Assistance Commission would vote on accreditation. Accreditation woul…

## Related bills

- 119-hr-4393: DIGNIDAD (Dignity) Act of 2025
- 119-hr-3151: SHIPS for America Act of 2025
- 119-hr-2725: Affordable Housing Credit Improvement Act of 2025
- 119-hr-1229: United States-Israel Defense Partnership Act of 2025
- 119-hr-4206: CONNECT for Health Act of 2025
- 119-hr-6766: Essential Caregivers Act of 2025

## Sources
- [119-hr-6315 on Congress.gov](https://www.congress.gov/bill/119th-congress/house-bill/6315)

## Related
- [119-hr-4393: DIGNIDAD (Dignity) Act of 2025](https://policyrisk.com/legislation/119-hr-4393)
- [119-hr-3151: SHIPS for America Act of 2025](https://policyrisk.com/legislation/119-hr-3151)
- [119-hr-2725: Affordable Housing Credit Improvement Act of 2025](https://policyrisk.com/legislation/119-hr-2725)
- [119-hr-1229: United States-Israel Defense Partnership Act of 2025](https://policyrisk.com/legislation/119-hr-1229)
- [119-hr-4206: CONNECT for Health Act of 2025](https://policyrisk.com/legislation/119-hr-4206)
- [119-hr-6766: Essential Caregivers Act of 2025](https://policyrisk.com/legislation/119-hr-6766)
- [All bills in Congress](https://policyrisk.com/legislation)

Source: PRIA, https://policyrisk.com/legislation/119-hr-6315 (as of 2026-04-21).