Where or how is a software/application/cloud solution verified?

And if I can’t find anything does that mean it’s not ?

The whole CSP service is listed in Fedramp marketplace but there is a service from the company that I want to verify but not sure how or where