diff --git a/net/dnssec-check/Makefile b/net/dnssec-check/Makefile
new file mode 100644
index 0000000000000..93260d4afc1f3
--- /dev/null
+++ b/net/dnssec-check/Makefile
@@ -0,0 +1,52 @@
+# SPDX-License-Identifier: GPL-2.0-or-later
+#
+# Copyright (C) 2025 Liu Yu <f78fk@live.com>
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=dnssec-check
+PKG_VERSION:=1.0.3
+PKG_RELEASE:=1
+
+PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
+PKG_SOURCE_URL:=https://codeload.github.com/liuyuf78fk/dnssec-check/tar.gz/v$(PKG_VERSION)?
+PKG_HASH:=d0a19c685af273cad1188d86d3435ef30eadecabfd6c062253246014e80b70cb
+
+PKG_MAINTAINER:=Liu Yu <f78fk@live.com>
+PKG_LICENSE:=GPL-2.0-or-later
+PKG_LICENSE_FILES:=LICENSE
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/dnssec-check
+  SECTION:=net
+  CATEGORY:=Network
+  SUBMENU:=IP Addresses and Names
+  TITLE:=Simple DNSSEC validation tool
+  DEPENDS:=+libuci +bind-dig
+  URL:=https://github.com/liuyuf78fk/dnssec-check
+endef
+
+define Package/dnssec-check/description
+  Checks whether the system's DNS resolution path properly supports DNSSEC validation.
+  Reports the DNSSEC support level as secure, medium, or insecure based on resolver behavior.
+endef
+
+define Build/Compile
+	$(TARGET_CC) $(TARGET_CFLAGS) $(TARGET_LDFLAGS) \
+	-o $(PKG_BUILD_DIR)/dnssec-check \
+	$(PKG_BUILD_DIR)/dnssec-check.c -luci
+endef
+
+define Package/dnssec-check/conffiles
+/etc/config/dnssec-check
+endef
+
+define Package/dnssec-check/install
+	$(INSTALL_DIR) $(1)/usr/bin
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/dnssec-check $(1)/usr/bin/
+	$(INSTALL_DIR) $(1)/etc/config
+	$(INSTALL_CONF) $(PKG_BUILD_DIR)/config/dnssec-check $(1)/etc/config/dnssec-check
+endef
+
+$(eval $(call BuildPackage,dnssec-check))