BigFix vs Tanium comparison

Why PeerSpot?

HCLSoftware and Tanium are both solutions in the Endpoint Protection Platform (EPP) category. HCLSoftware is ranked #23 with an average rating of 8.5, while Tanium is ranked #12 with an average rating of 8.3. Additionally, 97% of HCLSoftware users are willing to recommend the solution, compared to 81% of Tanium users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 18, 2026

BigFix and Tanium compete in the endpoint management category. While each has strengths, Tanium often has the upper hand due to its feature robustness and scalability despite higher costs.

Features: BigFix offers comprehensive client management, impressive inventory capabilities, and customization through APIs. It's known for scalability, real-time visibility, and robust automation across platforms. Tanium provides efficient patch management, excellent real-time data aggregation, and powerful query options. Its integrated security and IT operations offer valuable real-time analytics and broad endpoint management.

Room for Improvement: BigFix could improve documentation, dynamic messaging, and the web console. Users desire advancements in automation, multithreading, and broader database support. Tanium faces challenges with pricing complexity and interface clarity. Users request better scaling, network optimization, and refined threat intelligence features.

Ease of Deployment and Customer Service: BigFix is largely deployed on-premises, with strong technical support under HCL's management. Users praise the responsiveness and helpful community. Tanium excels in flexible cloud deployments, offering high customer satisfaction through reliable support, though occasional support reliability issues are noted.

Pricing and ROI: BigFix offers competitively priced packages perceived as good value, with users seeing ROI often within months. Tanium is more expensive but justified by its robust features and management efficiency, providing strong returns especially in large-scale environments.

To learn more, read our detailed BigFix vs. Tanium Report (Updated: September 2026).

Buyer's Guide

BigFix vs. Tanium

September 2026

Download the complete report

Helped 913,683 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Microsoft Intune

Featured Reviews

Anumula Hitesh

Senior Business Development Executive at Digitaltrack

Centralized device management has automated onboarding and improves remote security compliance

One thing I feel Microsoft Intune could improve is troubleshooting visibility. In many cases, when a policy or application deployment fails, the error messages are a bit generic. So, admins still spend time checking logs manually or testing on devices one by one. Compared to the simplicity of deployment, troubleshooting sometimes feels less mature. I also think reporting and real-time monitoring could be stronger. The dashboard gives useful information, but in large environments, many teams still depend on additional tools or scripts for deeper reporting and analytics. If I had to focus on one area first, I would probably choose troubleshooting and reporting. Deployment through Microsoft Intune is generally straightforward, but when something fails, identifying the exact root cause can still take more time than expected. Error messages are sometimes too generic, and admins often have to dig through logs, sync status, or multiple portals to understand what actually happened. I think user experience and policy management could also improve further. Microsoft Intune has become much better over the years, but sometimes the admin portal still feels fragmented because certain configurations open in different sections or redirect to older interfaces. For new admins, especially, it can take time to understand where everything is located. Another thing is policy conflict handling. In larger organizations, multiple device policies, compliance rules, and configuration profiles can overlap. When conflicts happen, the visibility is not always very clear, so admins spend time figuring out which policy actually won or caused the issue.

Read full review

InderjeetSingh4

Administrator at a tech vendor with 10,001+ employees

End-to-end automation has simplified patching and software deployment across thousands of servers

There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initiated through the patch policy, it appears on the console but arrives in chunks. When targeting hundreds of servers from the patch policy, the actions come in chunks such as ten out of six, ten out of nine, or ten out of fifteen. This fragmented approach creates a significant challenge for the patching team to monitor the action status. I would recommend that the development team provide a single action or one to two actions instead of multiple actions requiring individual monitoring. A broad status update could be provided to the client indicating the overall progress of the patch policy implementation rather than requiring monitoring of every individual action. This would reduce the bandwidth required by the team to track multiple actions on the console.

Read full review

Sandeepraj Gatla

Dfir Analyst at a tech services company with 201-500 employees

Endpoint monitoring has strengthened incident response and provides rapid isolation and forensics

Tanium provides an endpoint which is isolated from the network and environment. We can easily search its logs and history and connect remotely directly to that particular device which has been isolated from the network. We can search for the history and logs, including audit logs and event logs. The complete activity of the user or owner of the device is visible to us. We can see the artifacts of particular USB transfers internally for official use. We can not only connect remotely but also see the device status and how many failures have occurred within the network so far. We can see the IP address, how many times it has changed its IP address, and how many times it was connected to VPN or external VPN or internal VPN and what has been searched while on VPN. We can block the IOCs or IP addresses as well. We can block domains, hashes, SHA values, SHA-256, SHA-1, SHA-5 and MD5. Although I am not completely involved in the automation team, we do have that team and I have worked in some CERT recently. Tanium is more useful while we are in the CERT because most of the times when we are on high alert, Tanium does play a main role for that particular incident or any high case. Tanium is a simple tool and we can easily integrate it to many devices and it is a mandatory tool to secure an endpoint. It is mandatory to give any RDP connection and the tool should be present in the particular device. It is completely mandatory and it is in the policy as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Autopilot is one of the best features because we can use it during remote migration and it especially helps in this pandemic situation where we don't need any end-user computing engineer support."

"Technical support is good."

"It is a cloud solution, and you can easily scale as your needs grow."

"Intune's most valuable feature is its centralized management capability."

"We have a BYOD policy, and this solution helps us manage our devices."

"Previously, SCCM was used as an on-premise solution for clients, but now they are moving to Microsoft Intune as a cloud solution with better security and functions."

"While I don't think you can ever have full visibility and control, Intune certainly allows us to see the applications being used and tells us if things like Windows patches aren't applied to machines. It does a good job. That visibility makes life a little easier."

"The best features of Microsoft Intune include continuous implementation of new capabilities each year, covering almost everything."

More Microsoft Intune pros

"The BigFix features that have proven most effective include inventory, software delivery, software distribution, software catalog, and both software and hardware management."

"BigFix has drastically reduced the maintenance window period to patch and reboot servers."

"It allows us to quickly deploy capabilities that we need, whether it be security or non-security. We use it to keep systems up to date, deploy new drivers, find the information we need in the case of security incidents. The capability allows us to gather a lot of information very quickly and it also allows us to have a centralized reporting feature and a centralized deployment capability which is nice."

"BigFix is a great product. The flexibility of putting together your own relevance and retrieving custom data from any one of your agents is a valuable feature. It is one of my favorite features because if a boss asks me, "How many of these devices do we have?", I can put together a report in two seconds."

"Patch management is vital for security posture, so I wouldn't be surprised if BigFix is becoming increasingly popular."

"Some of my clients have gone from it taking months to be able to get through a patch cycle or to discover what's out there, down to days."

"It has improved my organization because we can automate a lot of tasks. We went from manually patching machines or doing our best and having very little visibility into it to us being able to set it and forget it and getting really good results on first-pass patching."

"Patch management: We've gone from hideous to amazing."

More BigFix pros

"Tanium is stable and it is also lightweight."

"When I push a quick update, it's done right away, and I can rescan immediately to confirm completion within minutes."

"Tanium is a simple tool and we can easily integrate it to many devices and it is a mandatory tool to secure an endpoint."

"I'm not so familiar with the tool but I like the interaction of the console to the picture. Patching is the primary model I have been focusing on for the last couple of weeks. So I have created a proof of concept environment and have been checking the available features."

"Tanium has made the process of detecting threats more proactive with its detection. So, the process is easier and more efficient."

"For incident response tasks, all these tasks can get done in minutes with minimal disruption to the end-user."

"It's definitely not complex, it is pretty user-friendly and it's a solid tool enterprise to use."

"The security features are very valuable."

More Tanium pros

Cons

"The most significant challenge is reporting and monitoring. The reporting accuracy for deploying applications and all aspects of Intune needs to be improved."

"Reporting can be better. Only global administrators can see detailed reports at the moment, and I don't want to use the global admin."

"The installation is very easy. However, to be able to configure it you will need special knowledge, such as training or self-studies to have a proper level of security. There are many settings one has to understand before being able to implement Microsoft Intune."

"The add-ons must be integrated into the solution."

"There are some areas of improvement for Microsoft Intune, including faster policy sync so changes can apply quicker, a simpler interface, better reporting with more details and clear insight, improved troubleshooting, clearer error messages and logs, and stronger support for macOS and Linux, alongside better cross-platform features."

"For additional functionality, I suggest that Microsoft could expand on asset management. Since the platform is there, they could develop it into a full-fledged asset management system."

"The difficulty of the the roll out is surprisingly difficult considering this product is supposed to be an integrated part of the 365 suite."

"I think that there is room for improvement with the reporting. If this is done, it will be a better product."

More Microsoft Intune cons

"I would like to see the Self Service section made more user-friendly."

"License management isn't quite as easy as it should be to deal with the licensing. You need to take the server down to import the new licenses which I find to be annoying."

"BigFix can improve the way machines report back to the console."

"Maybe they could introduce a preview of what is going to happen next, because generally what the project is doing is just asking you to execute some actions."

"A large infrastructure is required to implement BigFix for a medium-sized organization."

"BigFix should improve its compatibility with other platforms, such as Linux."

"Sometimes there is a lag time for our users."

"Maybe the online help could be improved. It'd be nice if you would have a lot more phrases and keywords that you could search for and find answers with the help."

More BigFix cons

"The problem or challenge is a pre-sales and go-to strategy for the SMB market delivered through a channel or model. It's very convoluted and vague, which leads to some confusion about the various types of modules, and the device-to-seat cost is extremely difficult to calculate."

"When working with Tanium, there are some older devices that haven't been patched for a long time, and certain patches are not included in Tanium. I have to search outside to download patches, create bundles, and then perform the task."

"The performance could improve in future releases. We have had performance issues in specialized web environments, but overall I think the problems are less than 2% of the computer systems being used."

"The main issues are the network connection because different customers have issues with their networks. It's difficult implementing this type of solution because the network is the main feature in the architecture for these types of solutions. Tanium could improve by creating some network optimization."

"There are downsides and drawbacks in Tanium, and there is room for improvement from my perspective."

"The most painful thing is the interface. It's a bit unclear sometimes."

"Tanium’s scalability could be improved."

"The solution lacks mobility."

More Tanium cons

Pricing and Cost Advice

"Every customer used to purchase licenses based on their needs."

"While I don't have access to high-level financial information, I believe we have achieved lower costs with this implementation."

"On a scale of one to ten with one being the cheapest, the cost of Microsoft Intune is a five."

"Existing E5 license holders for M365, Intune, and Azure, receive a free license."

"Microsoft Intune is more expensive than other solutions, but it offers a wider range of features and control."

"The pricing for Intune and the competitor products are all within the same range, there is no true advantage when it comes to cost."

"Microsoft offers some licensing where it's included at no extra cost when customers are already using the licenses. In such a case, it's a really good value. If you have to buy the licensing for it, it's probably on par with other solutions. It isn't substantially more or less expensive. The great thing is that it is included in some of Microsoft's licensed packages. So, some customers don't have to spend additional money for it. Typically, most providers that support Intune do charge a management fee of some sort or some fee. Certainly, we're no exception."

"Its licensing model is not complex, but it is very expensive compared to other solutions. They can bring more models and reduce the pricing. They should allow customers to select the features they want and price it accordingly."

More Microsoft Intune pricing and cost advice

"The product is less costly when compared to other solutions, and this is a good solid solution for what we have paid."

"The tool's price continues to go up. The cost per endpoint can vary, ranging from approximately 30 to 80 dollars per year. Compared to other products, pricing is in the middle. You need to buy an additional database license, but most users already have it."

"The price of BigFix could be lower. However, I am always seeking a lower price."

"The price of BigFix is better than the solutions. You are able to pay monthly or annually. There are not any hidden costs with BigFix. There is an additional cost for the SQL database."

"You are charged per server and per workstation when using BigFix. ManageEngine is a lot cheaper than BigFix. There are some additional costs, such as support."

"So, the pricing is slightly more expensive than the others. I have to keep buying licenses every time I add a new device."

"The license is subscription-based."

"I would stay with the Managed Virtual Server license model, which is a 1-to-1 license per OS whether it is virtual or physical."

More BigFix pricing and cost advice

"It's an expensive solution. It would be nice if the cost were lower."

"The product's pricing differs from region to region depending on negotiations and the number of endpoints."

"There is an annual license required to use this solution."

"The solution offers value for money."

"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."

"The solution is expensive but it's a good investment."

"It is higher than some competitors in the market."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

913,683 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

Financial Services Firm

Outsourcing Company

Computer Software Company

Financial Services Firm

13%

Outsourcing Company

Manufacturing Company

Construction Company

Financial Services Firm

13%

Government

Manufacturing Company

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	192
Midsize Enterprise	62
Large Enterprise	187

By reviewers
Company Size	Count
Small Business	30
Midsize Enterprise	12
Large Enterprise	68

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	4
Large Enterprise	12

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?

Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...

See all answers

What are the pros and cons of Microsoft Intune?

Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...

See all answers

How does Google Cloud Identity compare with Microsoft Intune?

Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...

See all answers

What is your experience regarding pricing and costs for BigFix?

I rate the price for BigFix as medium, neither low nor high.

See all answers

What needs improvement with BigFix?

There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initia...

See all answers

What is your primary use case for BigFix?

My current use case involves being one of the products and one of the clients implementing this tool.

See all answers

What needs improvement with Tanium?

While there is always room for improvement, I am pleased with Tanium.

See all answers

What is your primary use case for Tanium?

The primary use case for Tanium ( /products/tanium-reviews ) is compliance, patching, and inventory as part of the co...

See all answers

What advice do you have for others considering Tanium?

For smaller companies, Tanium is quite a big investment, and one needs to have a considerable setup to make it econom...

See all answers

Comparisons

IBM MaaS360 vs Microsoft Intune

Compared 12% of the time

Jamf Pro vs Microsoft Intune

Compared 9% of the time

Workspace ONE UEM vs Microsoft Intune

Compared 6% of the time

Microsoft Entra ID vs Microsoft Intune

Compared 3% of the time

NinjaOne vs Microsoft Intune

Compared 1% of the time

More Microsoft Intune Competitors

Red Hat Ansible Automation Platform vs BigFix

Compared 5% of the time

Microsoft Configuration Manager vs BigFix

Compared 4% of the time

HashiCorp Terraform vs BigFix

Compared 3% of the time

Check Point Harmony Endpoint vs BigFix

Compared 3% of the time

Red Hat Satellite vs BigFix

Compared 2% of the time

More BigFix Competitors

CrowdStrike Falcon vs Tanium

Compared 5% of the time

Microsoft Defender for Endpoint vs Tanium

Compared 4% of the time

Microsoft Configuration Manager vs Tanium

Compared 3% of the time

NinjaOne vs Tanium

Compared 3% of the time

TrendAI Vision One vs Tanium

Compared 2% of the time

More Tanium Competitors

Product Reports

Buyer's Guide

Microsoft Intune

September 2026

Download Microsoft Intune product report

Buyer's Guide

BigFix

September 2026

Download BigFix product report

Buyer's Guide

Tanium

August 2026

Download Tanium product report

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager

Tivoli Endpoint Manager

Tanium Inc Cloud, Tanium XEM

Interactive Demo

Demo not available

Microsoft

HCLSoftware

Demo not available

Tanium

Overview

Microsoft Intune is a cloud-based service designed for device management, security, and compliance. It supports automation and facilitates endpoint management for Windows, iOS, and Android devices, ensuring data protection and efficient policy enforcement.

Microsoft Intune offers seamless integration with tools like Windows Autopilot to automate device setup and deployment. Integrated with Azure Active Directory, it enhances policy management while providing robust reporting and analytics tools for compliance tracking. Despite its intuitive interface aimed at simplifying navigation and device security management, there are challenges such as compatibility issues with Linux and Mac, limited policy support for Android, and demands for better third-party integration. It's widely used for both corporate-owned devices and BYOD scenarios in dynamic IT environments.

What are the key features of Microsoft Intune?

Windows Autopilot: Automates device setup for rapid deployment.
Azure Active Directory Integration: Enhances user policy management.
Reporting and Analytics: Improves compliance visibility.
Mobile Application Management: Ensures app security without compromising personal data.
Cloud-Based Management: Allows management from any location.

What benefits and ROI can users expect?

Time Efficiency: Automation reduces time in policy enforcement and configuration updates.
Enhanced Security: Ensures data protection across corporate-owned and BYOD devices.
Improved Compliance: Advanced reporting tools enhance compliance visibility.
Flexible Management: Cloud-based nature supports management from any location.

In industries such as finance and healthcare, Microsoft Intune is implemented to ensure data protection and compliance with regulatory standards. Manufacturing sectors utilize Intune for managing a distributed workforce across global locations, while educational institutions employ it to secure and manage devices in learning environments supporting both students and faculty.

Microsoft

OVERVIEW:

HCL BigFix is a Unified Endpoint Management (UEM) and automation platform that delivers secure, resilient operations by reducing risk, cost, and operational complexity across on-premises, hybrid, and multi-cloud environments through a centralized control plane.

Built on a single-agent, multi-platform architecture, HCL BigFix unifies infrastructure security, endpoint management, remediation, and digital employee experience automation within a single platform, enabling IT Operations and Security teams to manage more than 165 million endpoints. As AI-driven vulnerability discovery accelerates through frontier models such as Mythos, HCL BigFix helps organizations reduce exposure with near real-time remediation, automated compliance enforcement, and continuous risk reduction. It integrates with leading vulnerability management solutions, including Tenable, Qualys, and Rapid7, and leverages 600,000+ out-of-the-box remediation Fixlets, 50,000+ compliance checks, and a proven >99.5% first-pass patch success rate to help organizations close the gap between vulnerability detection and remediation.

What are BigFix's key features?

Automated Patch & Vulnerability Remediation: Automates patch deployment and vulnerability remediation across workstations, servers, virtual machines, and cloud workloads using 600,000+ out-of-the-box remediation Fixlets.

Compliance Enforcement: Supports continuous compliance through 50,000+ compliance checks, automated policy enforcement, and prebuilt remediation content.

Enterprise Scalability: Manages and secures more than 165 million endpoints across over 120 operating system variants.

Centralized Endpoint Management: Delivers unified visibility and control across distributed environments through a resilient single-agent architecture.

Digital Employee Experience: Powered by AEX, HCL BigFix's agentic AI platform, enabling proactive monitoring, self-healing workflows, intelligent automation, and natural-language interaction.

What are potential benefits and ROI factors?

Reduced Cyber Risk: Near real-time remediation shortens exposure windows as AI-driven vulnerability discovery compresses exploitation timelines.

Lower Operational Costs: Consolidates endpoint management, security, and automation into a single platform, reducing tool sprawl and administrative overhead.

Operational Resilience: Maintains continuous compliance and policy enforcement across distributed environments.

Improved IT Efficiency: Automates routine endpoint operations and vulnerability remediation, reducing manual effort and accelerating response times.

Higher End-User Productivity: Resolves endpoint issues proactively to minimize disruption and improve employee experience.

Organizations across government, financial services, telecommunications, healthcare, manufacturing, and other regulated industries use BigFix for endpoint management, patching, compliance, software distribution, and vulnerability remediation. Support for standards including SCAP 1.3 and NIAP makes BigFix well suited for highly regulated and public-sector environments.

HCLSoftware

Tanium offers robust endpoint protection, patching, and inventory management, consolidating the functions of tools like BigFix with capabilities in incident response, network security, and cloud or on-premise deployments.

Known for real-time capabilities, Tanium provides detailed analytics, security features, and device management. Users benefit from quick implementation, real-time updates, and patching campaigns. Despite its strengths, integration and custom plugin expansion remain areas to improve, along with data visualization and network optimization. Reporting enhancements and user training could advance its usability, and some UI elements may require updates for clarity and security.

What are the essential features of Tanium?

Detailed Analytics: Provides actionable insights for better decision-making.
Security Capabilities: Offers strong defense measures against threats.
Real-Time Queries: Facilitates immediate information access.
Patch Management: Streamlines software updates across devices.
Device Management: Efficiently handles comprehensive inventory and monitoring tasks.

What benefits should users expect?

Ease of Use: Simplifies complex IT tasks.
Scalability: Adapts to growing IT infrastructure needs.
Integration Flexibility: Merges with existing systems effortlessly.
Real-Time Updates: Ensures current data availability for informed actions.

Tanium's deployment spans industries focusing on endpoint protection and compliance, ensuring reliable device and server management in settings where safety and quick adaptation are critical. Organizations use it for application deployment, compliance checks, and integrating it as an EDR solution, enhancing overall security and operational efficiencies.

Tanium

Sample Customers

Mitchells and Buzzers, Callaway

US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation

JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life

Buyer's Guide

BigFix vs. Tanium

September 2026

Free Report: BigFix vs. Tanium

Find out what your peers are saying about BigFix vs. Tanium and other solutions. Updated: September 2026.

DOWNLOAD NOW

913,683 professionals have used our research since 2012.

See our BigFix vs. Tanium report.

See our list of best Endpoint Protection Platform (EPP) vendors, best Unified Endpoint Management (UEM) vendors, and best Autonomous Endpoint Management vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.