The most effective way to evaluate and verify enterprise technology.

The RABET-V™ program uses industry-approved testing standards to help technology providers understand the security, reliability, accessibility, and risks associated with their products.

Verify your entire tech stack.

A verification program is a comprehensive third-party review, analysis, and testing of technology to confirm that a system correctly implements the required functionality and security requirements.

What began as a solution to verifying non-voting election technology, including electronic pollbooks, electronic ballot transmission solutions, election night reporting systems, and voter registration systems, is now capable of handling any technology product.

RABET-V introduces testing standards to better understand the security, reliability, and risks associated with a technology product.

The program

Testing technology for security, accessibility, and usability is challenging. The standards to which technology must be verified are often ambiguous or incomplete. The RABET-V program is a rapid, reliable, cost-effective approach to verifying enterprise technologies with standards based on industry best practices.

RABET-V works with any software-based technology. Through a mix of manual and automated reviews, RABET-V provides iterative, flexible verification for all technology products. Thoroughly vetted, third-party assessors play a vital role in RABET-V. Assessors are accredited business entities performing organizational, architecture, and product verification assessments for the RABET-V program.

Dive into the details

Read our technical documentation for more information about RABET-V's inner workings.

How it works

  1. Tech provider submission

    Tech provider submits a product to the RABET-V administrator, gets an initial scoping review, and is linked with accredited assessors.

  2. Organizational assessment

    Based on OWASP Software Assurance Maturity Model, RABET-V analyzes an organization's product development process to measurably determine its effectiveness at managing risks.

  3. Architecture assessment

    RABET-V analyzes a product's technology stack to determine if it is designed with modern techniques that lower the risk of failures and successful attacks.

  4. Product verification

    RABET-V assessors determine whether a product appropriately mitigates risk and meets the tech provider's claims regarding security, usability, and accessibility.

  5. Reporting and listing

    Full reports for each step of the RABET-V process go to the tech provider and verified product versions are listed on RABET-V public listing site.

  6. Continuous evaluation

    Process repeats with technology changes in a scaled form, based on previous assessment and risk of change. RABET-V continuously monitors the SBOMs of the verified products and allows tech providers to integrate vulnerability monitoring into their development pipelines.

Four people sitting next to each other on a conference stage.

A panel from the 2025 State Certification Testing of Election Systems National Conference (SCTESNC) on RABET-V.

From left to right: Mike Garcia, Former Senior Cybersecurity Advisor for the Center for Internet Security, and panel moderator; Megan Maier, former director of policy at Verified Voting; Grace Gordon, RABET-V administrator at The Turnout; Brian Glas, assistant professor and department chair of computer science at Union University.

Testimonials

The evolution of the RABET-V project is a great example of what can be accomplished when government and the private sector work together for the benefit of us all.

Tammy Patrick CEO of Programs, Election Center

RABET-V's novel approach to testing combines multiple best testing approaches to give a clearer picture of the overall quality of a piece of technology.

Mike McCabe CEO, Cloud Security Partners

A national standard for testing of non-voting technology is long overdue. Election officials need a way to conduct unbiased, standards-based assessments of these systems, whether they are built and managed by state resources or by a service provider. RABET-V is specifically designed and ready to take on this task.

Trevor Timmons Former Chief Information Officer, Colorado Department of State

Achieving this level of approval with RABET-V demonstrates our unwavering commitment to enhancing the security of our products. We are proud to lead the way in improving the certification process for non-voting election technology.

Aaron Wilson President at Enhanced Voting

Media & Resources

Press releases:

Articles:

Pilot reports:

We also have sample procurement language (email us at team@rabetv.org and we can help you customize), as well as a two-page overview of RABET-V (PDF).

Who administers RABET-V?

RABET-V is a Center for Internet Security (CIS) program operated and administered by The Turnout.

CIS is a community-driven nonprofit, known for developing globally recognized best practices for securing IT systems and data. The Turnout is a consultancy at the intersection of public administration and technology, with decades of experience in technology and policy.

The Turnout has been operating the RABET-V program since its launch in 2023. RABET-V offers a flexible, rapid, cost-effective process for verifying vendor-provided and homegrown government technology. In collaboration with CIS, The Turnout has seen the program from its pilot stage to full operation, with over four product areas achieving verification. RABET-V began as a pilot program in 2019, introducing testing standards that help public offices better understand the security, reliability, and risks associated with technology.

Updates in your inbox

Subscribe to our monthly newsletter, the RABET-V Digest, for the latest news and updates about RABET-V.

Subscribe to our newsletter

Contact us

Are you interested in integrating RABET-V into your products? Want to become an assessor? Reach out to us via email at team@rabetv.org, and we'll get back to you with more information.