# Changelog of Domain Security Checker (`automation-lab/bulk-domain-security-posture-checker`) Actor

- **URL**: https://apify.com/automation-lab/bulk-domain-security-posture-checker/changelog.md
- **Full Actor documentation**: https://apify.com/automation-lab/bulk-domain-security-posture-checker.md

## Changelog

### 2026-10-24

#### Fixes

- Clean CAA records and distinguish unavailable DNS/email evidence from confirmed missing configuration; avoid unsupported NS/CAA inheritance conclusions.
- Correct basic SPF all-mechanism handling, validate unscoped IP literals and canonical CIDR syntax/ranges, and exclude ignored redirects from lookup estimates; improve legacy-compatible DMARC percentage parsing and expose organizational-domain policy provenance and assessment limits.

#### Safety

- Validate and pin public TLS/HTTPS destinations, contain redirects and response resources, and discard sensitive URL components.
- Stop admitting domain checks at the available report budget and couple output persistence to SDK charging.

#### Features

- Add flat overview fields and focused email, certificate and remediation export views while preserving nested reports.

#### Integrations

- Add private, sanitized error diagnostics with 30-day retention and redacted domain inputs.

### 0.1.0

- Added bulk DNS, SPF, optional-selector DKIM, DMARC, TLS certificate, HTTPS, and security-header checks.
- Added one normalized report per unique domain with severity-tagged findings, diagnostic scoring, timestamps, and remediation guidance.
- Added bounded concurrency, network timeouts, partial-failure diagnostics, and optional raw email-authentication records.