The Microsoft Business Server Security Assessment tool scans for vulnerabilities in the database. Some of these include missing service packs and updates, weak or blank SA passwords, missing local accounts, and the ability to authenticate using a domain controller.