BigFix vs OpenText EnCase eDiscovery comparison

The compared HCLSoftware and OpenText solutions aren't in the same category. HCLSoftware is ranked #25 in EPP , with an average rating of 8.3, and holds a 1.7% mindshare in the category. OpenText is ranked #9 in eD , and holds a 3.7% mindshare. Additionally, 97% of HCLSoftware users are willing to recommend the solution, compared to 75% of OpenText users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between BigFix and OpenText EnCase eDiscovery based on real PeerSpot user reviews.

Find out what your peers are saying about CrowdStrike, Microsoft, SentinelOne and others in Endpoint Protection Platform (EPP).

To learn more, read our detailed Endpoint Protection Platform (EPP) Report (Updated: June 2026).

Buyer's Guide

Endpoint Protection Platform (EPP)

June 2026

Download the complete report

Helped 902,417 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
BigFix	1.7%
Microsoft Defender for Endpoint	6.8%
CrowdStrike Falcon	6.0%
Other	85.5%

Endpoint Protection Platform (EPP)

eDiscovery Mindshare Distribution
Product	Mindshare (%)
OpenText EnCase eDiscovery	3.7%
kCura Relativity	5.6%
Microsoft Purview eDiscovery	5.1%
Other	85.6%

eDiscovery

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Ravi Khanchandani

Founder Director at Techsa Services

Long-term partnership improves customer satisfaction and delivers efficient endpoint management

BigFix supports something known as Patch Policies, which allows users to define that whenever critical patches are released, they should get evaluated against machines and automatically deploy them. Their software distribution is very efficient because they use a pull mechanism rather than a push mechanism, allowing each machine to download from the closest repository and install themselves. The same assessment mechanism applies for real-time vulnerability remediation, allowing identification, evaluation, and automatic remediation across machines. Compliance metrics typically measure the patch percentages deployed against the number of endpoints, which could be various device types including virtual machines and mobile devices. Measurements are taken against each device type, looking into compliance percentages for browsers such as Chrome and Edge based on their versions.

Read full review

Alejandro Stromer

Director Consulting SAP OpenText en Entelgy at DCL Consultores EIM SL

A stable and scalable hybrid solution with easy setup

The solution is scalable. It has three levels. You have the presentation area that can be escalated to the balance sheet. You have the back-end area that can be escalated using higher viability to configure more application servers. Also, the area of storage can be increased. We usually cater to enterprise solutions but have small- and medium-sized customers. It starts with 25 users and goes up to 100s and 1000s.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The biggest positive impact I see from Cortex XDR by Palo Alto Networks is a significant reduction in the number of people required to manage it."

"We think that this product will help us grow, as it meets our needs currently and we can grow with it over time."

"But overall, when we speak about security and protection, they are one of the top providers."

"In one single alert, we are getting the network telemetry, endpoint telemetry, email security telemetry, and proxy telemetry all in one single ticket, making it very easy."

"There has been a significant reduction of approximately 70% to 80% in our internal MTTR and MTTD metrics, now around five to eight minutes whereas previously it was hours, which has helped tremendously."

"My advice for anybody who is considering Cortex XDR is that it is a complete solution, and has very good features."

"The solution is a new generation XDR that has a lot of artificial intelligence modules."

"Threat identification and detection are the most valuable features of this solution."

More Cortex XDR by Palo Alto Networks pros

"We basically use it as our master source and then, from that, it helps us provide a source of truth."

"All the vendor patches are synchronized automatically, which is something you don't find in other tools."

"It allows us to quickly deploy capabilities that we need, whether it be security or non-security. We use it to keep systems up to date, deploy new drivers, find the information we need in the case of security incidents. The capability allows us to gather a lot of information very quickly and it also allows us to have a centralized reporting feature and a centralized deployment capability which is nice."

"In terms of vulnerability management, it gives tough competition by providing a single management console with multiple benefits."

"Almost every feature is wonderful in BigFix. It is very stable, and we can rely on it. It is an awesome tool."

"The technical support for BigFix is really amazing."

"The most valuable features of the solution are Windows patching and the hardware and software inventory."

"From a security standpoint, it allows us to make sure that we're not leaving ourselves vulnerable to exploits and things like that. That's the biggest advantage that we see to the product from a security standpoint."

More BigFix pros

"I like the processing feature on the product because it does everything at once, i.e, indexing, recovery, keyword searches, etc."

"Using Encase we are able to implement security and also Forensics."

"Image creation and image analysis in one program, basically for ease of use."

"The most important feature we've found is the Enscripts. That is one powerful feature that I, personally, love to use."

"It is a very useful tool; it is worth buying irrespective of price."

"The solution has been quite good, and, overall, the features we need are available to us."

"It indexes much faster, and is more reflexive because of the Enscripts."

"Data Recovery: Its ability to repair damaged partitions and uncover hidden partitions from within the tool, and allow further analysis."

More OpenText EnCase eDiscovery pros

Cons

"Based on our experience so far, its implementation is quite complex."

"Palo Alto Networks Cortex XDR does not detect malicious activity like in other anti-virus solutions like Trend Micro and Windows with Cisco."

"In the next release, I would like to see more UI improvements. Their UI is a bit basic. When we are speaking about Palo Alto Networks they are the big company, so they can improve the UI a little bit. The UI, the reports, the log system can all be improved."

"In reporting they should have a customizable dashboard due to the fact that C-level people don't like reporting to the IT department. They prefer to have a real-time dashboard. That kind of dashboard needs to have various customizations."

"The deployment is pretty hard."

"To jump from the partner to Palo Alto directly was challenging."

"This product has not improved my organization - in fact, we are in the process of moving back to another product as a result of Cortex's horrible impact on system performance."

"Cortex XDR by Palo Alto Networks can improve mobile integration to allow access to the console."

More Cortex XDR by Palo Alto Networks cons

"I would like to see more integration with external data."

"The main shortcoming of BigFix was integration with vulnerability management. If you had a vulnerability in your software and BigFix on the endpoint, you needed integration with Qualys, Tenable, or another vulnerability management solution to fix that. It was like, "Okay, we can identify issues, and get that information back from the endpoint, but what are we doing about it?""

"Dynamic messaging needs improvement because one of the things that we deal with a lot is the messaging when pushing releases out."

"There is some complexity, a learning curve, but overall it's a great product."

"The self-service application seems to need some work to replace the client UI. There are a lot of pop-ups if you use a baseline as the object that you're setting to a workstation. Unless you're using web UI, the message is not customizable in the user notification."

"Technical support depends on who you get. I deal with some amazing support folks, and then I've dealt with some less-than-amazing support folks."

"I would like to see improvements in the Web UI program and also a BigFix console for Mac OS."

"The setup was very complex."

More BigFix cons

"I would like to see a capability to ingest and absorb more data. That would be really good. It currently is lacking this function."

"We have come across problems with the end-case. We could not find an email discovery type of module and there was not flexibility with the email."

"I suggest that if the mobile phone acquisition is embedded in the Encase law enforcement version, it would be very useful."

"There were minor UI bugs."

"This is not the program I would suggest for a newbie using to learn. It is just too expensive for the full experience, and the student versions, while very good, are just for that, students."

"Ease of use and learning curve need improvement."

"In the past, incident response time for tech support was slow."

"The reporting is a bit unreliable. It needs to be better."

More OpenText EnCase eDiscovery cons

Pricing and Cost Advice

"The cost depends on your chosen license type, like Pro or other licenses."

"Compared to CrowdStrike, Cortex XDR is an expensive solution."

"Cortex XDR by Palo Alto Networks is an expensive solution."

"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."

"The solution is expensive. It's pricing is on a yearly-basis."

"I don't recall what the cost was, but it wasn't really that expensive."

"This is an expensive solution."

"It has a yearly renewal."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"The price is very fair."

"The price of the solution is high. There are not any additional fees from the standard license."

"We have a subscription-based contract with BigFix."

"You are charged per server and per workstation when using BigFix. ManageEngine is a lot cheaper than BigFix. There are some additional costs, such as support."

"The tool's price continues to go up. The cost per endpoint can vary, ranging from approximately 30 to 80 dollars per year. Compared to other products, pricing is in the middle. You need to buy an additional database license, but most users already have it."

"The price is reasonable, but our customers find it expensive."

"The price of BigFix could be lower. However, I am always seeking a lower price."

"On a scale from one to ten, where one is expensive and ten is cheap, I rate the solution's pricing one out of ten."

More BigFix pricing and cost advice

"EnCase is an affordable solution."

"The product is affordable and user-friendly."

"We have a license. And, we found the cost high. We contacted them and talked to them about the ratio of the US dollar versus the Indian rupee and then we came to a solution."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

902,417 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

12%

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Financial Services Firm

13%

Manufacturing Company

10%

Government

Construction Company

Performing Arts

10%

Construction Company

10%

Financial Services Firm

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	46
Midsize Enterprise	21
Large Enterprise	52

By reviewers
Company Size	Count
Small Business	30
Midsize Enterprise	12
Large Enterprise	67

By reviewers
Company Size	Count
Small Business	2
Midsize Enterprise	2
Large Enterprise	3

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for BigFix?

The pricing is pretty good and now follows a subscription model similar to other major software solutions, making it ...

See all answers

What needs improvement with BigFix?

I have concerns about BigFix's pricing, which I find to be slightly on the higher side. While it may not be the most ...

See all answers

What is your primary use case for BigFix?

I have been working at Tech Data for the last 12 plus years.

See all answers

Ask a question

Earn 20 points

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 10% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Tanium vs BigFix

Compared 5% of the time

Red Hat Ansible Automation Platform vs BigFix

Compared 5% of the time

Microsoft Configuration Manager vs BigFix

Compared 4% of the time

Red Hat Satellite vs BigFix

Compared 3% of the time

HashiCorp Terraform vs BigFix

Compared 2% of the time

More BigFix Competitors

Commvault Cloud vs OpenText EnCase eDiscovery

Compared 10% of the time

kCura Relativity vs OpenText EnCase eDiscovery

Compared 8% of the time

Nuix eDiscovery vs OpenText EnCase eDiscovery

Compared 7% of the time

Trellix Endpoint Security Platform vs OpenText EnCase eDiscovery

Compared 6% of the time

LAW PreDiscovery vs OpenText EnCase eDiscovery

Compared 4% of the time

More OpenText EnCase eDiscovery Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

June 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

BigFix

June 2026

Download BigFix product report

Buyer's Guide

eDiscovery

May 2026

Download OpenText EnCase eDiscovery product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Tivoli Endpoint Manager

EnCase eDiscovery

Interactive Demo

Demo not available

Palo Alto Networks

HCLSoftware

Demo not available

OpenText

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

HCL BigFix offers a Unified Endpoint Management platform that enhances security, reduces costs, and simplifies IT operations across hybrid, multi-cloud environments through a centralized control structure.

BigFix streamlines enterprise IT management by integrating infrastructure security, endpoint remediation, and employee experience automation within a single platform. It enables IT Operations and Security teams to function efficiently from a unified control plane, managing over 155 million endpoints. Its robust architecture supports continuous compliance and automated vulnerability remediation, closing the gap between detection and fix. It excels in digital employee experience by ensuring proactive monitoring and utilizing agentic AI for self-healing workflows and intelligent automation, thereby reducing manual efforts and enhancing productivity.

What are BigFix's key features?

Efficient Patch Management: Automates and optimizes patch distribution across platforms.
Compliance Integration: Ensures robust adherence to compliance standards through automated processes.
Scalability: Capable of managing and securing an extensive range of endpoints.
Multi-Platform Support: Provides management for various operating systems through a single console.
Customization Options: Enables API-based customizations and versatile reporting capabilities.

What are potential benefits and ROI factors?

Enhanced Security: Swift vulnerability management reduces risk exposure.
Cost Efficiency: Centralized management minimizes operational complexities and expenses.
Operational Resilience: Maintains compliance and security across distributed environments.
Ease of Management: Simplifies diverse environment management with robust tools.
Boost in Productivity: Reduces manual IT efforts while improving employee experience.

Industries such as telecom, finance, and industrial facilities leverage BigFix for comprehensive patch management, software deployment, and inventory solutions. They benefit from its capacity to support endpoint security, compliance, and diverse operational needs, using it for vulnerability assessment and custom content creation.

HCLSoftware

OpenText EnCase eDiscovery is a versatile tool used in data management and forensic investigations. It offers capabilities in indexing, recovery, and handling complex tasks, providing an integrated platform for data recovery, image creation, and analysis.

OpenText EnCase eDiscovery integrates artificial modeling and customizable EnScripts for efficient file management, ensuring an enhanced user experience with its intuitive interface. It supports multiple search capabilities, including regular expressions and keyword searches, and offers features like Pathways and SweepEnterprise for ease of use. Users can take advantage of full tech search and AI integration for improved functionality. Despite its robustness, areas needing enhancement include data ingestion, mobile phone acquisition, and email extension support, as well as reporting reliability and performance improvements.

What are the most important features?

EnScripts: Enable customization and deployment of scripts for file management.
Artificial Modeling: Enhances stability of the system with improved performance.
Search Capabilities: Offers various search options like regular expressions and keyword searches.
Integration with AI: Enhances user experience through advanced tech search.
Pathways & SweepEnterprise: Provides user-friendly approaches to ease navigation and use.

What benefits should users look for in reviews?

Improved User Experience: Seamless navigation and effective task handling.
Enhanced Data Management: Offers an all-in-one platform for data recovery and analysis.
Efficiency in Complex Tasks: Simultaneous task handling with effective load management.
Advanced Security: Utilizes Endpoint Security EnCase SAFE to monitor nodes and machines.

OpenText EnCase eDiscovery finds significant use in data centers and forensic investigations across various industries. It serves engineering and capital projects by improving project and asset management documentation. In forensic roles, it functions as a tool for imaging, data extraction, and keyword analysis, contributing extensively to enhanced project outcomes.

OpenText

Sample Customers

CBI Health Group, University Honda, VakifBank

US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation

Ontario Ministry of Government, Aerospace Company, Chesterfield Police Department

Buyer's Guide

Endpoint Protection Platform (EPP)

June 2026

Download Free Report

Find out what your peers are saying about CrowdStrike, Microsoft, SentinelOne and others in Endpoint Protection Platform (EPP). Updated: June 2026.

DOWNLOAD NOW

902,417 professionals have used our research since 2012.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.