DomainHealthChecker updated to version 2.2.0

1

Hi all,

I am proud to present to you my module, which I first published in 2021 and is now available online in version 2.2.0 as of July 2026. It is the DomainHealthChecker module, published on GitHub and the PowerShell Gallery.

:red_question_mark: What does the DomainHealthChecker PowerShell Module for the cybersecurity of your email domain(s)?

:left_facing_fist: This module automatically checks for:

:white_check_mark: SPF validation

  • Retrieves and validates SPF DNS records
  • Detects syntax errors, multiple SPF records, and excessive DNS lookups
  • Identifies weak or overly permissive SPF policies

:white_check_mark:DKIM validation

  • Checks for the existence of DKIM records
  • Validates DKIM selectors and public keys
  • Flags missing or misconfigured DKIM setups
    -:new_button:(New in 2.2.0) When multiple DKIM records are configured, it tries to find them all

:white_check_mark:DMARC validation

  • Retrieves and validates DMARC DNS records
  • Evaluates DMARC policy (none, quarantine, reject)
  • Reviews alignment and reporting configuration

:white_check_mark: BIMI validation

  • Retrieves and validates BIMI DNS records
  • Checks if VMC certificate is valid

:white_check_mark: MTA-STS

  • Retrieves and validates the MTA-STS DNS records

:white_check_mark: DNSSEC

  • Retrieves DNSSEC configuration
  • Checks if DNSSEC is enabled or not

:white_check_mark::new_button:(New in 2.2.0) TLS-RPT

  • Checks if TLS-RPT is configured

:white_check_mark::new_button:(New in 2.2.0) DNS CAA

  • Checks id the CAA record is present
  • Checks whether IODEF is configured or not

:white_check_mark: Email security health overview

  • Combines SPF, DKIM, DMARC, BIMI, DNSSEC, MTA-STS, TLS-RPT, and CAA results per domain
  • Highlights misconfigurations and spoofing risks
  • Provides a clear domain email security health status

:saluting_face: This module has cross-platform support for Windows, Linux and macOS with PowerShell Core.

If you have any questions, bug reports, or suggestions for improvements, please let me know!

1 Like
2

Welcome to the forum! Thanks for making and sharing this module. I use Invoke-SpfDkimDmarc multiple times a week, if not daily. It makes it easy to report on hundreds of domains in no time. Any MSP reading should check it out!

1 Like
3

Thanks for your kind words. If you have any ideas how I can improve the module, I would like to hear!