The SECURE IT Act strengthens the security of voting systems by requiring two main changes to how election equipment is tested and protected. First, it requires the Election Assistance Commission to include penetration testing—where security experts try to hack into voting systems to find weaknesses—as part of the regular testing and certification process for all voting machines and software. This must happen within 180 days of the law passing.

Second, the bill creates a 5-year pilot program that lets cybersecurity researchers legally test election systems for vulnerabilities. Here's how it works: voting machine companies can voluntarily allow researchers to examine their equipment and source code, but only after the researchers pass background checks. If researchers find security problems, they must tell the company, the Election Assistance Commission, and the Department of Homeland Security, and keep it confidential for 180 days while the company fixes it. If a company finds a serious vulnerability, they must send a patch to election officials and get it certified quickly—within 90 days or it's automatically approved. The law protects researchers from being sued by companies for their good-faith security testing, and it keeps vulnerability information out of public records until it's been properly disclosed.

Basically, this bill makes voting systems more secure by encouraging experts to find and report problems before bad actors can exploit them, while protecting both the researchers doing the testing and giving companies time to fix issues before they become public.