Agency CLI + Report Pack: client domain reports, run on your own computer
For IT providers and agencies that look after several client domains. Give the tool a list of the domains you are authorised to check; it checks the public DNS email-authentication records and the home-page HTTPS headers of each one, then writes one report with your name and logo, plus a machine-readable file per domain.
One-off £39 GBP. Instant download after PayPal confirms the payment. No account, no subscription, nothing hosted: the tool runs where you run it.
From £5, one-off. Includes a one-page summary you can drop into a board pack.
Expands your free evidence pack into the remediation files + management summary.
What you get from one run
One multi-client report
An HTML report with a summary table across every client, then a section per domain with the records seen in public DNS and suggested changes. Print it to PDF from any browser.
A plain PDF too
The script also writes an A4 PDF of the summary and findings directly, with no extra software.
domain-health-v1 JSON per domain
One file per domain in the open domain-health-v1 format. Keep them to show change over time, or load them into the free scanner in your browser.
Your name and logo
Set your agency name, logo (PNG, JPEG or SVG) and accent colour. A short attribution line stays at the foot of every report.
What it checks
- SPF: the record, the full include tree and the 10-lookup count.
- DMARC: policy (
p=), subdomain policy, reporting tags, duplicate or malformed records. - MX, MTA-STS, TLS-RPT and CAA records.
- HTTPS, HSTS and clickjacking headers on each home page (skip with
--no-web).
The check logic is the same as the auditor in the £24 Remediation Pack. A domain whose lookups fail is listed as "Not assessed" with no score: a failed lookup is not a missing record.
What is in the download
fp_agency_report.py: the Python 3 command-line tool (standard library, no installs).agency_report.html: an offline report builder. Load domain-health-v1 files, set your name and logo, print. It makes no network requests.templates/: a one-page Management summary (Markdown and printable HTML) and a Supplier posture extract (Markdown and CSV), with plain-English boxes for what was observed, what the DNS change achieves and residual questions for the DPO.- Example domain list, sample output built from test data for
example.comandexample.org, a README and the licence.
python3 fp_agency_report.py clients.txt --authorised --agency "Your agency" --logo logo.png --out report
# report/agency-report.html report/agency-report.pdf report/health/<domain>.json report/summary.csvAuthorised domains
Live checks need the --authorised flag, which confirms you are authorised to check every domain in the list: your own, or your clients' with their agreement. The tool reads public DNS and each home page, the same information any visitor or mail server sees. It sends nothing to FaultyPacket: no domain list, no results, no telemetry.
Attribution line
Every report ends with: Generated with FaultyPacket tools. Checks run by <your agency>; FaultyPacket did not perform or endorse this assessment. The tool has no option to remove it.
Questions
- How many domains?
- Up to 1,000 per run. The tool pauses half a second between domains by default to keep the load on public resolvers low.
- Does it change any DNS?
- No. It reads public records and reports what it saw. Fixes are yours to make; the £24 Remediation Pack has the templates.
- How is this different from the £19 NIS2 & DORA Supplier Pack?
- The £19 pack is a bulk auditor for supplier due diligence. This pack is for producing branded reports for clients, with a JSON file per domain.
- Licence?
- One purchase covers one organisation and the clients it manages. You can give the reports to your clients; you cannot resell the tool itself.
- Refunds?
- See refunds and terms. Help is at support.