Welcome to the Microsoft Baseline Security Analyzer

The Microsoft Baseline Security Analyzer (MBSA) checks computers running Microsoft Windows® Server 2003, Windows XP, or Windows 2000 for common security misconfigurations. You must have administrator privileges for each computer you want to scan.

Note that on computers running Windows XP and using simple file sharing, only local scans can be performed.

Scanning computers for security updates utilizes Windows Server Update Services. MBSA provides integration for Update Services administrators and is a comprehensive standalone tool for the information technology professional.

Scan a computer
Scan more than one computer
View existing security reports

This version of Microsoft Baseline Security Analyzer has expired. Please upgrade to the released version.

Go to Microsoft Baseline Security Analyzer Updates

The Microsoft Baseline Security Analyzer requires MSXML. You must install MSXML before starting MBSA.

Go to XML download page