Free SQL Server Security Tools & Checklists
Professional-grade tools and foundational checklists to safely audit and secure your SQL Server environment.
Get-SqlSafe.ps1: The Sarpedon SQL Server Security Community Assessment
Run 27 core SQL Server security checks, completely free.
Get-SqlSafe Community Edition is a free PowerShell-based assessment for Microsoft SQL Server 2016 through 2025, Amazon RDS for SQL Server and, with an optional module, Azure SQL Database. It checks 27 core security controls plus 4 informational items and generates an HTML report with a visual summary.
See what the free SQL Server security check covers and how to run it.
The Community Edition focuses on selected baseline areas that frequently reveal broader security hygiene issues: auditing gaps, NTLM usage, excessive privileges, risky role memberships, orphaned users, invalid ownership mappings, and security-relevant configuration choices.
It comes with a simple visual connection dialog and is designed to be transparent, built around a least-privilege execution model. It runs read-only and does not change SQL Server configuration or data. As with any new tool, test it on a non-production instance first.
This Community Edition does not replace a full SQL Server Security Assessment. It is intended to provide a practical first look at SQL Server’s high-level security posture and help start the conversation on securing your database server.
The Database Application Vendor’s SQL Server Security & High Availability Checklist
A blueprint for secure-by-default, resilient data applications.
As a database application vendor, the security and reliability of your software are key competitive differentiators. As a Database Administrator, your priority is ensuring that hosted databases do not expose data or the environment to risk. We developed this checklist to bridge that gap. Following this guidance not only helps align with ISO 27001 controls, but ensures that your product can be trusted against the backdrop of a demanding enterprise environment and an evolving threat landscape.
View the Checklist online: The Database Application Vendor’s SQL Server Security & High Availability Checklist
How to Choose a SQL Server Security Consultant
What to look for, and what to ask before you sign.
A short guide for anyone comparing providers for a SQL Server security review: the six criteria that matter, the questions to ask about permissions and data handling, and the warning signs of a generic scan sold as consulting.
To see what a SQL Server security audit checks and how it works, read SQL Server Security Audit.