Microsoft Baseline Security Analyzer (MBSA) has been deprecated and is no longer developed.
then what is an alternat?
For a PowerShell alternative, see Using WUA to Scan for Updates Offline with PowerShell.
Notes:
The preceding scripts use the WSUS offline scan file (wsusscn2.cab) to perform a scan and get the same information on missing updates as MBSA supplied. MBSA also relied on the wsusscn2.cab to determine which updates were missing from a given system without connecting to any online service or server. The wsusscn2.cab file is still available and there are currently no plans to remove or replace it. The wsusscn2.cab file contains the metadata of only security updates, update rollups and service packs available from Microsoft Update; it doesn't contain any information on non-security updates, tools or drivers.
Download the latest version Wsusscn2.cab