Get-SqlSafe Community Edition v2026.3: free SQL Server security baseline check with console-only mode

Hi all,

I recently published Get-SqlSafe Community Edition, a free PowerShell-based first-look security assessment for Microsoft SQL Server 2016 through 2025.

It checks 25 high-level SQL Server security indicators and generates a local HTML report with a visual summary.

The current version includes:

• visual connection dialog
• console-only execution for scripted/admin scenarios
• NTLM usage check across connected user sessions
• checks for excessive privileges, risky role memberships, orphaned users, and invalid ownership mappings
• checks for security-relevant configuration choices such as TRUSTWORTHY, xp_cmdshell, and related settings
• forensic-readiness indicators such as SQL Server Auditing baseline, login-failure logging and SQL Server error log retention

The tool is designed to be transparent and non-invasive. On supported modern SQL Server versions, it runs without sysadmin privileges and does not change SQL Server configuration or data.

GitHub:
https://github.com/Sarpedon-Quality-Lab/sql-security-community-scripts

Background article:
https://andreas-wolter.com/en/2605_get-sqlsafe_communityedition_sqlserver_security_asssessment_tool/

The idea is to give DBAs, consultants, and security teams a quick way to get an early impression of a SQL Server environment before deciding where to dig deeper.