BigFix vs Tanium comparison

HCLSoftware and Tanium are both solutions in the Endpoint Protection Platform (EPP) category. HCLSoftware is ranked #24 with an average rating of 8.7, while Tanium is ranked #14 with an average rating of 8.3. Additionally, 97% of HCLSoftware users are willing to recommend the solution, compared to 81% of Tanium users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 18, 2026

BigFix and Tanium compete in the endpoint management category. While each has strengths, Tanium often has the upper hand due to its feature robustness and scalability despite higher costs.

Features: BigFix offers comprehensive client management, impressive inventory capabilities, and customization through APIs. It's known for scalability, real-time visibility, and robust automation across platforms. Tanium provides efficient patch management, excellent real-time data aggregation, and powerful query options. Its integrated security and IT operations offer valuable real-time analytics and broad endpoint management.

Room for Improvement: BigFix could improve documentation, dynamic messaging, and the web console. Users desire advancements in automation, multithreading, and broader database support. Tanium faces challenges with pricing complexity and interface clarity. Users request better scaling, network optimization, and refined threat intelligence features.

Ease of Deployment and Customer Service: BigFix is largely deployed on-premises, with strong technical support under HCL's management. Users praise the responsiveness and helpful community. Tanium excels in flexible cloud deployments, offering high customer satisfaction through reliable support, though occasional support reliability issues are noted.

Pricing and ROI: BigFix offers competitively priced packages perceived as good value, with users seeing ROI often within months. Tanium is more expensive but justified by its robust features and management efficiency, providing strong returns especially in large-scale environments.

To learn more, read our detailed BigFix vs. Tanium Report (Updated: June 2026).

Buyer's Guide

BigFix vs. Tanium

June 2026

Download the complete report

Helped 908,800 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Microsoft Intune

Featured Reviews

OluwashileAdeniyi

Senior Infrastructure Security Engineer at a outsourcing company with 51-200 employees

Centralized endpoint security has improved and supports hybrid work and BYOD policies

Regarding what I dislike about Microsoft Intune and its downsides, I would say that more Mac controls are needed because we have limited Mac and Linux control. When comparing controls and policies between Windows, Mac, and Linux, Windows has almost everything you can think of, while Mac and Linux have limited types of control. You cannot implement certain things on Mac and Linux that you can on Windows. The limited controls are a major issue. Additionally, if Microsoft could find a way to embed servers into Microsoft Intune, that would be beneficial. Microsoft Intune is not really designed for servers or Windows servers. It is more tailored towards Windows 11 and Windows 10 operating systems. Windows servers are not fully supported. Enterprise organizations usually have both servers and endpoints, which are users' workstations. For servers, most people look for other solutions such as SCCM, which is Configuration Manager. However, SCCM is what Microsoft Intune is trying to replace. Both SCCM and Microsoft Intune belong to Microsoft. Microsoft is trying to transition organizations into Microsoft Intune, the native cloud solution. However, because this update is still in process, servers are not fully compatible with Microsoft Intune and cannot be managed by it. The current policy that has emerged from issues with clients is what they call co-management, which is relatively new, and I do not know if adoption is significant. Many legacy or older customers who have been using these products for decades still have SCCM. When it is time for them to manage their Windows devices, they use what is called cloud attach. Cloud attach is a term whereby your SCCM is connected to your Microsoft Intune. Most people do not know about it, but I have deployed it for several organizations. Cloud attach and co-management work together so that your device is in SCCM, but some policies are pushed from Microsoft Intune. It is like two different solutions working hand in hand. That is what they call co-management. Microsoft Intune does not bring all of your endpoint and security management tools into one place, which is the goal and how it should be. However, as I mentioned, servers are not included. If we talk about end users, Microsoft Intune does bring all your devices together. In a typical enterprise environment, you have end users with workstations, laptops, company-issued phones, and bring your own devices. You can create policies for all of these. However, for the backend, your servers do not have much coverage. Servers are not really covered by Microsoft Intune in that way.

Read full review

InderjeetSingh4

Administrator at a tech vendor with 10,001+ employees

End-to-end automation has simplified patching and software deployment across thousands of servers

There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initiated through the patch policy, it appears on the console but arrives in chunks. When targeting hundreds of servers from the patch policy, the actions come in chunks such as ten out of six, ten out of nine, or ten out of fifteen. This fragmented approach creates a significant challenge for the patching team to monitor the action status. I would recommend that the development team provide a single action or one to two actions instead of multiple actions requiring individual monitoring. A broad status update could be provided to the client indicating the overall progress of the patch policy implementation rather than requiring monitoring of every individual action. This would reduce the bandwidth required by the team to track multiple actions on the console.

Read full review

Sandeepraj Gatla

Dfir Analyst at a tech services company with 201-500 employees

Endpoint monitoring has strengthened incident response and provides rapid isolation and forensics

Tanium provides an endpoint which is isolated from the network and environment. We can easily search its logs and history and connect remotely directly to that particular device which has been isolated from the network. We can search for the history and logs, including audit logs and event logs. The complete activity of the user or owner of the device is visible to us. We can see the artifacts of particular USB transfers internally for official use. We can not only connect remotely but also see the device status and how many failures have occurred within the network so far. We can see the IP address, how many times it has changed its IP address, and how many times it was connected to VPN or external VPN or internal VPN and what has been searched while on VPN. We can block the IOCs or IP addresses as well. We can block domains, hashes, SHA values, SHA-256, SHA-1, SHA-5 and MD5. Although I am not completely involved in the automation team, we do have that team and I have worked in some CERT recently. Tanium is more useful while we are in the CERT because most of the times when we are on high alert, Tanium does play a main role for that particular incident or any high case. Tanium is a simple tool and we can easily integrate it to many devices and it is a mandatory tool to secure an endpoint. It is mandatory to give any RDP connection and the tool should be present in the particular device. It is completely mandatory and it is in the policy as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is a stable solution."

"The solution is fully integrated with the Microsoft platform and the Autopilot feature, which is a unique feature."

"Microsoft Intune has been a time saver and reduces the time and effort IT admins have to invest."

"I mainly use Microsoft Intune analytics for taking that data that exists and bringing it into Power BI dashboards to make it visible to our clients, showing them all the operating systems in their environment and where the latest patches are, and then from there creating plans."

"Its security is most valuable. It gives us a way to secure devices, not only those that are steady. We do have a few tablets and other devices, and it is a way for us to secure these devices and manage them. We know they're out there and what's their status. We can manage their life cycle and verify that they're updated properly."

"Microsoft Intune helps secure hybrid work by allowing organizations to manage and secure devices remotely."

"Microsoft Intune not only saves costs by reducing the number of personnel needed but also offers a comprehensive solution for managing laptops, applications, security, individual access, and enrollment."

"Microsoft Intune has never crashed for me; it always works without fail."

More Microsoft Intune pros

"From a security standpoint, it allows us to make sure that we're not leaving ourselves vulnerable to exploits and things like that. That's the biggest advantage that we see to the product from a security standpoint."

"Servers are patched more consistently than they have been previously."

"We basically use it as our master source and then, from that, it helps us provide a source of truth."

"We've actually fixed the patching by improving our patch application by almost 60%."

"Being able to hit all of our endpoints is the most beneficial feature of this solution."

"Reliability of the agent and the ability to troubleshoot actions after they've been taken are the most valuable features."

"Our compliance levels - i.e. our compliance percentage has improved."

"We've had no issues with stability."

More BigFix pros

"Tanium's most valuable features are patch management, inventory, and distribution software."

"Tanium is used for endpoint management, specifically patching and configuration management."

"The product is granular and can build complex roles compared to other EDR vendors."

"The solution is scalable and helps to understand how infrastructure works. It helps to improve the health of the organization."

"Tanium’s best features include support for any Windows, Linux, or Mac endpoint, regardless of where it is, and the ability to do IT operations and security operations."

"I like the tool's incident response and security patching."

"When I push a quick update, it's done right away, and I can rescan immediately to confirm completion within minutes."

"I would say Tanium is the best tool for vulnerability management."

More Tanium pros

Cons

"I'd suggest adding more features for macOS in Intune. There should be more functionality for managing macOS. There should be a better capability for pushing things down on macOS. Currently, Intune is not capable of managing macOS at the same level as Windows."

"There needs to be more support for Mac operating systems."

"Each feature has a separate license, making logistics and cost management difficult if not strategically bundled together."

"In future releases, I would like to see better integration with Apple products."

"It would be beneficial to have a more straightforward understanding of Intune's capabilities, presented in a simplified manner."

"Reporting needs improvement."

"The reporting causes problems because we're trying to gather data to present to the management, but we can't get the data they request. If a user has removed an application from his device, but it won't report it at exactly the right time. It takes time to sync from the device to the portal. Let's say we are preparing a list or deck for the number of compliant devices that meet all of the organization's requirements. In a real-time scenario, that device could be compliant, but it is showing as non-compliant on the portal. It sometimes hampers the overall decisions that we make on our end."

"Currently, BitLocker does not support BYOD enrollment, which is a product limitation."

More Microsoft Intune cons

"Sometimes there is a lag time for our users."

"I would like to see the Self Service section made more user-friendly."

"Relay selection and availability needs improvement as an incorrect relay selected can cause network chokes."

"The first setup was complex."

"I would like to see for it to be a little easier for new users to be able to learn and create relevant statements. In my opinion, that's the hardest part for bringing on new people that haven't had BigFix experience. Being able to have easier ways to build relevance in ActionScript would be the biggest improvement I'd like to see."

"The technical support is usually pretty good. However, I had a ticket that stayed open for a couple of weeks which I didn't get a response to, and when we got the response it wasn't really good."

"The self-service application seems to need some work to replace the client UI. There are a lot of pop-ups if you use a baseline as the object that you're setting to a workstation. Unless you're using web UI, the message is not customizable in the user notification."

"I would like the dashboard to be improved to show the problematic machines and good machines."

More BigFix cons

"In my opinion, sometimes it takes a long time to give solutions or resolve the issue."

"The problem or challenge is a pre-sales and go-to strategy for the SMB market delivered through a channel or model. It's very convoluted and vague, which leads to some confusion about the various types of modules, and the device-to-seat cost is extremely difficult to calculate."

"The most painful thing is the interface. It's a bit unclear sometimes."

"The solution needs to improve the reporting and tracking capabilities."

"When working with Tanium, there are some older devices that haven't been patched for a long time, and certain patches are not included in Tanium. I have to search outside to download patches, create bundles, and then perform the task."

"Tanium required local admin or root rights on Mac devices, which did not comply with our security policies. This made the solution less suitable for our restrictive environment."

"Any movement into a SaaS solution has challenges since the processes and data flows are not well defined. Hence, you need to build it at the same time."

"Most of the time, agent-relative issues have to be more equipped with self-healing features. At times, the agent is there, but for some reason, it doesn't report a status. It gives certain problems that are obviously agent-based."

More Tanium cons

Pricing and Cost Advice

"The price of Intune is included with the license for Office 365, so we don't have to pay anything extra for it."

"For Microsoft 365 E5 clients, cost is not an issue as this product is one of the benefits."

"The pricing is good because customers are not complaining about it."

"We work in the charity sector, so a lot of our clients get Microsoft Premium licenses or Business Premium for free. They get ten licenses free, and a lot of our clients do not have more than ten staff members. They are getting the tool for free, so its cost is not an issue."

"The product is expensive."

"Intune is included in the Microsoft 365 licensing package that we have."

"It is average. Some of the costs are quite high depending on what the customer currently uses, but overall, it is not bad. I would not say that I would not recommend Intune based on the cost. I definitely would, but they can definitely improve on the cost. So overall, its cost is not bad."

"Microsoft Intune is pretty reasonable. We have difficulty with Azure, which is probably why we have not put many assets in Azure. Everything we put there is very expensive."

More Microsoft Intune pricing and cost advice

"You get what we call the Platform Edition, which you get for free. The patch service is maybe $0.50 per workstation per month. Then there's the basic server cost, which is about $1.50 per server per month. You also get into Lifecycle which does power management, OSD remote control, and those types of things, and that might be about 10 times the price - which works out to about $13 per server and, maybe $5 per workstation per month."

"On a scale from one to ten, where one is expensive and ten is cheap, I rate the solution's pricing one out of ten."

"The tool's price continues to go up. The cost per endpoint can vary, ranging from approximately 30 to 80 dollars per year. Compared to other products, pricing is in the middle. You need to buy an additional database license, but most users already have it."

"The price is very fair."

"It might be about $23 a client."

"I can estimate the reduced cost of servers maintenance to approximatively $500,000."

"When purchasing, buying with other IBM tools provided us with a very good discount in pricing."

"The price of BigFix is better than the solutions. You are able to pay monthly or annually. There are not any hidden costs with BigFix. There is an additional cost for the SQL database."

More BigFix pricing and cost advice

"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."

"It's an expensive solution. It would be nice if the cost were lower."

"It is higher than some competitors in the market."

"The solution is expensive but it's a good investment."

"There is an annual license required to use this solution."

"The solution offers value for money."

"The product's pricing differs from region to region depending on negotiations and the number of endpoints."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

908,800 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

10%

Manufacturing Company

Computer Software Company

Outsourcing Company

Financial Services Firm

13%

Manufacturing Company

Government

Construction Company

Financial Services Firm

14%

Government

10%

Manufacturing Company

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	192
Midsize Enterprise	62
Large Enterprise	186

By reviewers
Company Size	Count
Small Business	30
Midsize Enterprise	12
Large Enterprise	68

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	4
Large Enterprise	12

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?

Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...

See all answers

What are the pros and cons of Microsoft Intune?

Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...

See all answers

How does Google Cloud Identity compare with Microsoft Intune?

Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...

See all answers

What is your experience regarding pricing and costs for BigFix?

I rate the price for BigFix as medium, neither low nor high.

See all answers

What needs improvement with BigFix?

There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initia...

See all answers

What is your primary use case for BigFix?

My current use case involves being one of the products and one of the clients implementing this tool.

See all answers

What needs improvement with Tanium?

While there is always room for improvement, I am pleased with Tanium.

See all answers

What is your primary use case for Tanium?

The primary use case for Tanium ( /products/tanium-reviews ) is compliance, patching, and inventory as part of the co...

See all answers

What advice do you have for others considering Tanium?

For smaller companies, Tanium is quite a big investment, and one needs to have a considerable setup to make it econom...

See all answers

Comparisons

IBM MaaS360 vs Microsoft Intune

Compared 11% of the time

Jamf Pro vs Microsoft Intune

Compared 10% of the time

Workspace ONE UEM vs Microsoft Intune

Compared 6% of the time

Microsoft Entra ID vs Microsoft Intune

Compared 3% of the time

More Microsoft Intune Competitors

Red Hat Ansible Automation Platform vs BigFix

Compared 5% of the time

Microsoft Configuration Manager vs BigFix

Compared 4% of the time

HashiCorp Terraform vs BigFix

Compared 3% of the time

Check Point Harmony Endpoint vs BigFix

Compared 2% of the time

Red Hat Satellite vs BigFix

Compared 2% of the time

More BigFix Competitors

CrowdStrike Falcon vs Tanium

Compared 5% of the time

Microsoft Defender for Endpoint vs Tanium

Compared 4% of the time

NinjaOne vs Tanium

Compared 3% of the time

Microsoft Configuration Manager vs Tanium

Compared 3% of the time

Qualys VMDR vs Tanium

Compared 2% of the time

More Tanium Competitors

Product Reports

Buyer's Guide

Microsoft Intune

July 2026

Download Microsoft Intune product report

Buyer's Guide

BigFix

August 2026

Download BigFix product report

Buyer's Guide

Tanium

July 2026

Download Tanium product report

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager

Tivoli Endpoint Manager

Tanium Inc Cloud, Tanium XEM

Interactive Demo

Demo not available

Microsoft

HCLSoftware

Demo not available

Tanium

Overview

Microsoft Intune is a cloud-based service designed for device management, security, and compliance. It supports automation and facilitates endpoint management for Windows, iOS, and Android devices, ensuring data protection and efficient policy enforcement.

Microsoft Intune offers seamless integration with tools like Windows Autopilot to automate device setup and deployment. Integrated with Azure Active Directory, it enhances policy management while providing robust reporting and analytics tools for compliance tracking. Despite its intuitive interface aimed at simplifying navigation and device security management, there are challenges such as compatibility issues with Linux and Mac, limited policy support for Android, and demands for better third-party integration. It's widely used for both corporate-owned devices and BYOD scenarios in dynamic IT environments.

What are the key features of Microsoft Intune?

Windows Autopilot: Automates device setup for rapid deployment.
Azure Active Directory Integration: Enhances user policy management.
Reporting and Analytics: Improves compliance visibility.
Mobile Application Management: Ensures app security without compromising personal data.
Cloud-Based Management: Allows management from any location.

What benefits and ROI can users expect?

Time Efficiency: Automation reduces time in policy enforcement and configuration updates.
Enhanced Security: Ensures data protection across corporate-owned and BYOD devices.
Improved Compliance: Advanced reporting tools enhance compliance visibility.
Flexible Management: Cloud-based nature supports management from any location.

In industries such as finance and healthcare, Microsoft Intune is implemented to ensure data protection and compliance with regulatory standards. Manufacturing sectors utilize Intune for managing a distributed workforce across global locations, while educational institutions employ it to secure and manage devices in learning environments supporting both students and faculty.

Microsoft

OVERVIEW:

HCL BigFix is a Unified Endpoint Management (UEM) and automation platform that delivers secure, resilient operations by reducing risk, cost, and operational complexity across on-premises, hybrid, and multi-cloud environments through a centralized control plane.

Built on a single-agent, multi-platform architecture, HCL BigFix unifies infrastructure security, endpoint management, remediation, and digital employee experience automation within a single platform, enabling IT Operations and Security teams to manage more than 155 million endpoints. As AI-driven vulnerability discovery accelerates through frontier models such as Mythos, HCL BigFix helps organizations reduce exposure with near real-time remediation, automated compliance enforcement, and continuous risk reduction. It integrates with leading vulnerability management solutions, including Tenable, Qualys, and Rapid7, and leverages 600,000+ out-of-the-box remediation Fixlets, 50,000+ compliance checks, and a proven >98% first-pass patch success rate to help organizations close the gap between vulnerability detection and remediation.

What are BigFix's key features?

Automated Patch & Vulnerability Remediation: Automates patch deployment and vulnerability remediation across workstations, servers, virtual machines, and cloud workloads using 600,000+ out-of-the-box remediation Fixlets.

Compliance Enforcement: Supports continuous compliance through 50,000+ compliance checks, automated policy enforcement, and prebuilt remediation content.

Enterprise Scalability: Manages and secures more than 155 million endpoints across over 120 operating system variants.

Centralized Endpoint Management: Delivers unified visibility and control across distributed environments through a resilient single-agent architecture.

Digital Employee Experience: Powered by AEX, HCL BigFix's agentic AI platform, enabling proactive monitoring, self-healing workflows, intelligent automation, and natural-language interaction.

What are potential benefits and ROI factors?

Reduced Cyber Risk: Near real-time remediation shortens exposure windows as AI-driven vulnerability discovery compresses exploitation timelines.

Lower Operational Costs: Consolidates endpoint management, security, and automation into a single platform, reducing tool sprawl and administrative overhead.

Operational Resilience: Maintains continuous compliance and policy enforcement across distributed environments.

Improved IT Efficiency: Automates routine endpoint operations and vulnerability remediation, reducing manual effort and accelerating response times.

Higher End-User Productivity: Resolves endpoint issues proactively to minimize disruption and improve employee experience.

Organizations across government, financial services, telecommunications, healthcare, manufacturing, and other regulated industries use BigFix for endpoint management, patching, compliance, software distribution, and vulnerability remediation. Support for standards including SCAP 1.3 and NIAP makes BigFix well suited for highly regulated and public-sector environments.

HCLSoftware

Tanium offers robust endpoint protection, patching, and inventory management, consolidating the functions of tools like BigFix with capabilities in incident response, network security, and cloud or on-premise deployments.

Known for real-time capabilities, Tanium provides detailed analytics, security features, and device management. Users benefit from quick implementation, real-time updates, and patching campaigns. Despite its strengths, integration and custom plugin expansion remain areas to improve, along with data visualization and network optimization. Reporting enhancements and user training could advance its usability, and some UI elements may require updates for clarity and security.

What are the essential features of Tanium?

Detailed Analytics: Provides actionable insights for better decision-making.
Security Capabilities: Offers strong defense measures against threats.
Real-Time Queries: Facilitates immediate information access.
Patch Management: Streamlines software updates across devices.
Device Management: Efficiently handles comprehensive inventory and monitoring tasks.

What benefits should users expect?

Ease of Use: Simplifies complex IT tasks.
Scalability: Adapts to growing IT infrastructure needs.
Integration Flexibility: Merges with existing systems effortlessly.
Real-Time Updates: Ensures current data availability for informed actions.

Tanium's deployment spans industries focusing on endpoint protection and compliance, ensuring reliable device and server management in settings where safety and quick adaptation are critical. Organizations use it for application deployment, compliance checks, and integrating it as an EDR solution, enhancing overall security and operational efficiencies.

Tanium

Sample Customers

Mitchells and Buzzers, Callaway

US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation

JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life

Buyer's Guide

BigFix vs. Tanium

June 2026

Free Report: BigFix vs. Tanium

Find out what your peers are saying about BigFix vs. Tanium and other solutions. Updated: June 2026.

DOWNLOAD NOW

908,800 professionals have used our research since 2012.

See our BigFix vs. Tanium report.

See our list of best Endpoint Protection Platform (EPP) vendors, best Unified Endpoint Management (UEM) vendors, and best Autonomous Endpoint Management vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.