BigFix vs Tanium comparison

Why PeerSpot?

HCLSoftware and Tanium are both solutions in the Endpoint Protection Platform (EPP) category. HCLSoftware is ranked #23 with an average rating of 8.5, while Tanium is ranked #12 with an average rating of 8.3. Additionally, 97% of HCLSoftware users are willing to recommend the solution, compared to 81% of Tanium users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 18, 2026

BigFix and Tanium compete in the endpoint management category. While each has strengths, Tanium often has the upper hand due to its feature robustness and scalability despite higher costs.

Features: BigFix offers comprehensive client management, impressive inventory capabilities, and customization through APIs. It's known for scalability, real-time visibility, and robust automation across platforms. Tanium provides efficient patch management, excellent real-time data aggregation, and powerful query options. Its integrated security and IT operations offer valuable real-time analytics and broad endpoint management.

Room for Improvement: BigFix could improve documentation, dynamic messaging, and the web console. Users desire advancements in automation, multithreading, and broader database support. Tanium faces challenges with pricing complexity and interface clarity. Users request better scaling, network optimization, and refined threat intelligence features.

Ease of Deployment and Customer Service: BigFix is largely deployed on-premises, with strong technical support under HCL's management. Users praise the responsiveness and helpful community. Tanium excels in flexible cloud deployments, offering high customer satisfaction through reliable support, though occasional support reliability issues are noted.

Pricing and ROI: BigFix offers competitively priced packages perceived as good value, with users seeing ROI often within months. Tanium is more expensive but justified by its robust features and management efficiency, providing strong returns especially in large-scale environments.

To learn more, read our detailed BigFix vs. Tanium Report (Updated: September 2026).

Buyer's Guide

BigFix vs. Tanium

September 2026

Download the complete report

Helped 914,262 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Microsoft Intune

Featured Reviews

Anumula Hitesh

Senior Business Development Executive at Digitaltrack

Centralized device management has automated onboarding and improves remote security compliance

One thing I feel Microsoft Intune could improve is troubleshooting visibility. In many cases, when a policy or application deployment fails, the error messages are a bit generic. So, admins still spend time checking logs manually or testing on devices one by one. Compared to the simplicity of deployment, troubleshooting sometimes feels less mature. I also think reporting and real-time monitoring could be stronger. The dashboard gives useful information, but in large environments, many teams still depend on additional tools or scripts for deeper reporting and analytics. If I had to focus on one area first, I would probably choose troubleshooting and reporting. Deployment through Microsoft Intune is generally straightforward, but when something fails, identifying the exact root cause can still take more time than expected. Error messages are sometimes too generic, and admins often have to dig through logs, sync status, or multiple portals to understand what actually happened. I think user experience and policy management could also improve further. Microsoft Intune has become much better over the years, but sometimes the admin portal still feels fragmented because certain configurations open in different sections or redirect to older interfaces. For new admins, especially, it can take time to understand where everything is located. Another thing is policy conflict handling. In larger organizations, multiple device policies, compliance rules, and configuration profiles can overlap. When conflicts happen, the visibility is not always very clear, so admins spend time figuring out which policy actually won or caused the issue.

Read full review

InderjeetSingh4

Administrator at a tech vendor with 10,001+ employees

End-to-end automation has simplified patching and software deployment across thousands of servers

There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initiated through the patch policy, it appears on the console but arrives in chunks. When targeting hundreds of servers from the patch policy, the actions come in chunks such as ten out of six, ten out of nine, or ten out of fifteen. This fragmented approach creates a significant challenge for the patching team to monitor the action status. I would recommend that the development team provide a single action or one to two actions instead of multiple actions requiring individual monitoring. A broad status update could be provided to the client indicating the overall progress of the patch policy implementation rather than requiring monitoring of every individual action. This would reduce the bandwidth required by the team to track multiple actions on the console.

Read full review

Sandeepraj Gatla

Dfir Analyst at a tech services company with 201-500 employees

Endpoint monitoring has strengthened incident response and provides rapid isolation and forensics

Tanium provides an endpoint which is isolated from the network and environment. We can easily search its logs and history and connect remotely directly to that particular device which has been isolated from the network. We can search for the history and logs, including audit logs and event logs. The complete activity of the user or owner of the device is visible to us. We can see the artifacts of particular USB transfers internally for official use. We can not only connect remotely but also see the device status and how many failures have occurred within the network so far. We can see the IP address, how many times it has changed its IP address, and how many times it was connected to VPN or external VPN or internal VPN and what has been searched while on VPN. We can block the IOCs or IP addresses as well. We can block domains, hashes, SHA values, SHA-256, SHA-1, SHA-5 and MD5. Although I am not completely involved in the automation team, we do have that team and I have worked in some CERT recently. Tanium is more useful while we are in the CERT because most of the times when we are on high alert, Tanium does play a main role for that particular incident or any high case. Tanium is a simple tool and we can easily integrate it to many devices and it is a mandatory tool to secure an endpoint. It is mandatory to give any RDP connection and the tool should be present in the particular device. It is completely mandatory and it is in the policy as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We are transforming our flat network by adopting different cloud solutions, and our own applications are hosted in the cloud. Intune ensures our security throughout our entire cloud-based system, improving our security posture."

"Microsoft Intune has a pretty positive impact overall, especially in terms of device management efficiency and supporting remote work."

"I have seen a return on investment with Microsoft Intune, as it has saved me resources; previously, I managed my infrastructure with a team of around six to seven members, but after transitioning to the Microsoft Intune hybrid model, I am able to manage it with just one resource, allowing me to cut costs significantly, around 50-60 lakhs."

"I would say right now that Microsoft Intune is one of the best solutions."

"The key benefit of Intune is its integration with the Microsoft ecosystem."

"Using Azure and Intune has helped us resolve most of these issues, as we no longer need a physical infrastructure to manage systems and can push policies remotely while maintaining control over the devices."

"I mainly use Microsoft Intune analytics for taking that data that exists and bringing it into Power BI dashboards to make it visible to our clients, showing them all the operating systems in their environment and where the latest patches are, and then from there creating plans."

"Everything has worked better since we started using Intune."

More Microsoft Intune pros

"BigFix is a great product. The flexibility of putting together your own relevance and retrieving custom data from any one of your agents is a valuable feature. It is one of my favorite features because if a boss asks me, "How many of these devices do we have?", I can put together a report in two seconds."

"The most valuable aspect of BigFix is its ability to patch desktops. While we have complete control over servers and can easily push patches to them, desktops pose a greater risk for leaks and vulnerabilities if patches are not installed in a timely manner. By using BigFix, we have significantly improved our ability to patch desktops, whether they are laptops, desktops, or other mobile devices used by end-users."

"I like the overall usage of it; it's easy to use, gives you great visibility into your environment, allows customization of your reports, and offers a community of users from whom you can pull experience and knowledge, which is one of the main advantages of using BigFix."

"We basically use it as our master source and then, from that, it helps us provide a source of truth."

"Prior to BigFix we used Altiris, which was distributed. We had to manage multiple servers, and duplicate the tasks that we did on each server. BigFix tremendously reduced the amount of work that we had to do on each server in a centralized manner. We could minimize the work that we had to do, and we had a lot more control over the tasks and what machines they ran on."

"The most valuable feature is the patching."

"The tool's most valuable features are patching and integration with vulnerability scanners."

"BigFix supports something known as Patch Policies, which allows users to define that whenever critical patches are released, they should get evaluated against machines and automatically deploy them."

More BigFix pros

"The insights we gain from our endpoints and the management capabilities that Tanium provides have been a boon to our operations and security."

"I like the fact that you can create patching campaigns depending on the area of your network that you want to address first. I like the ability it has to make several campaigns that work in parallel."

"The product is granular and can build complex roles compared to other EDR vendors."

"The solution's technical support is very responsive."

"Tanium is highly scalable."

"Tanium's most valuable features are patch management, inventory, and distribution software."

"Tanium is used for endpoint management, specifically patching and configuration management."

"Tanium’s best features include support for any Windows, Linux, or Mac endpoint, regardless of where it is, and the ability to do IT operations and security operations."

More Tanium pros

Cons

"I think nine is a very good rating for this solution, and I kept one point out because I think in the future it requires improvement based on future scalability in the IT infrastructure."

"The solution could be improved by the opportunity to connect third-party application databases, such as Chocolatey or another setup store, to Intune."

"There are challenges with Intune, specifically in reporting. Many third-party companies offer single-pane-of-glass reporting that shows you what your update environment looks like, how your patch is doing, application status, etc., but Intune's reporting is not intuitive. You can connect to Azure, monitoring, and the workbooks, but it's not streamlined."

"Intune needs to incorporate more tools to reduce the number of third-party applications we rely on."

"The reports that are generated aren't so great. They don't give a lot of meaning so far, but that could be down to user knowledge than the actual reporting side of things. I'm not a big user of it, but I was a bigger user of MaaS360, and we used to be able to run weekly and monthly reports. In the case of any deviations. we'd get a warning immediately. That's not so easy to do or to get in place for Intune. This could be just a user issue, but when I compare both, that's the only thing that's lacking for me."

"The tool's tunnel gateway is not very good, making it an area where improvements are required."

"Microsoft Intune could be improved by adding short video tutorials or direct links to Microsoft articles in the information button."

"There is room for improvement in integrating additional features such as Purview and SharePoint activities into Intune."

More Microsoft Intune cons

"BigFix can improve the way machines report back to the console."

"Needs to improve Network Access Protection (NAP) technologies to prevent computers with vulnerabilities from gaining access to networks."

"The only thing that I don't like about BigFix is that it does not support other devices such as printer firmware, router firmware, and things like that."

"The reporting and dashboard parts have room for improvement."

"The BigFix Inventory could have an increased scope regarding the tools that can be detected. It does not cover all the possible software installed in Asset."

"We need a much better multi-tenant option."

"There is some complexity, a learning curve, but overall it's a great product."

"I self-taught for this online, so the initial setup was a little difficult to pick up at first. I had to create a couple of testing environments and destroy them in order to learn how to use it. There was a lot of trial and error, a lot of reading of the manuals."

More BigFix cons

"There are some bugs in the product. The tool needs to improve in the area of reporting."

"The solution lacks mobility."

"Our biggest issue with the solution is its lack of mobility."

"Tanium's limitations should be improved because although it is a great tool, it is limited to only a few classes during a session."

"The performance could improve in future releases. We have had performance issues in specialized web environments, but overall I think the problems are less than 2% of the computer systems being used."

"Tanium’s scalability could be improved."

"The most painful thing is the interface. It's a bit unclear sometimes."

"Tanium required local admin or root rights on Mac devices, which did not comply with our security policies. This made the solution less suitable for our restrictive environment."

More Tanium cons

Pricing and Cost Advice

"Existing E5 license holders for M365, Intune, and Azure, receive a free license."

"Microsoft offers some licensing where it's included at no extra cost when customers are already using the licenses. In such a case, it's a really good value. If you have to buy the licensing for it, it's probably on par with other solutions. It isn't substantially more or less expensive. The great thing is that it is included in some of Microsoft's licensed packages. So, some customers don't have to spend additional money for it. Typically, most providers that support Intune do charge a management fee of some sort or some fee. Certainly, we're no exception."

"Cost is not my department, but the product is included in the E5 license that we already pay for every user, so no additional cost is incurred."

"There is a license required to use the solution. If you're core users in Office 365, for example, you have Outlook email and E3 license, this is only email. You have to buy an EMS license to have Microsoft Intune. It is expensive."

"The cost is handled through our Office 365 license, so I have yet to be able to compare it directly with other tools in its class."

"Intune is included in the Microsoft 365 licensing package that we have."

"Generally, we get favorable discounts, so it's not too bad. Obviously, we're looking at decreasing those wherever we can to bring value back to the public purse because it's all charity based. It's all publicly funded."

"Intune comes with the licensing that is common for large organizations. However, Microsoft has recently released many add-ons that are very expensive, especially for large organizations or corporations."

More Microsoft Intune pricing and cost advice

"We have a subscription-based contract with BigFix."

"I would stay with the Managed Virtual Server license model, which is a 1-to-1 license per OS whether it is virtual or physical."

"You get what we call the Platform Edition, which you get for free. The patch service is maybe $0.50 per workstation per month. Then there's the basic server cost, which is about $1.50 per server per month. You also get into Lifecycle which does power management, OSD remote control, and those types of things, and that might be about 10 times the price - which works out to about $13 per server and, maybe $5 per workstation per month."

"When purchasing, buying with other IBM tools provided us with a very good discount in pricing."

"Compliance, inventory, and licensing are really pricey. They should lower the price. It discourages users from getting onboard."

"The product is less costly when compared to other solutions, and this is a good solid solution for what we have paid."

"It is too costly. It is one of the best tools, but because of pricing, not all clients support it. Its licensing is on a yearly basis."

"The cost is slightly high."

More BigFix pricing and cost advice

"It's an expensive solution. It would be nice if the cost were lower."

"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."

"There is an annual license required to use this solution."

"The solution is expensive but it's a good investment."

"It is higher than some competitors in the market."

"The product's pricing differs from region to region depending on negotiations and the number of endpoints."

"The solution offers value for money."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

914,262 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

Financial Services Firm

Outsourcing Company

Computer Software Company

Financial Services Firm

13%

Outsourcing Company

Manufacturing Company

Construction Company

Financial Services Firm

13%

Government

Manufacturing Company

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	192
Midsize Enterprise	62
Large Enterprise	187

By reviewers
Company Size	Count
Small Business	30
Midsize Enterprise	12
Large Enterprise	68

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	4
Large Enterprise	12

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?

Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...

See all answers

What are the pros and cons of Microsoft Intune?

Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...

See all answers

How does Google Cloud Identity compare with Microsoft Intune?

Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...

See all answers

What is your experience regarding pricing and costs for BigFix?

I rate the price for BigFix as medium, neither low nor high.

See all answers

What needs improvement with BigFix?

There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initia...

See all answers

What is your primary use case for BigFix?

My current use case involves being one of the products and one of the clients implementing this tool.

See all answers

What needs improvement with Tanium?

While there is always room for improvement, I am pleased with Tanium.

See all answers

What is your primary use case for Tanium?

The primary use case for Tanium ( /products/tanium-reviews ) is compliance, patching, and inventory as part of the co...

See all answers

What advice do you have for others considering Tanium?

For smaller companies, Tanium is quite a big investment, and one needs to have a considerable setup to make it econom...

See all answers

Comparisons

IBM MaaS360 vs Microsoft Intune

Compared 12% of the time

Jamf Pro vs Microsoft Intune

Compared 9% of the time

Workspace ONE UEM vs Microsoft Intune

Compared 5% of the time

Microsoft Entra ID vs Microsoft Intune

Compared 3% of the time

NinjaOne vs Microsoft Intune

Compared 1% of the time

More Microsoft Intune Competitors

Red Hat Ansible Automation Platform vs BigFix

Compared 5% of the time

Microsoft Configuration Manager vs BigFix

Compared 4% of the time

HashiCorp Terraform vs BigFix

Compared 3% of the time

Check Point Harmony Endpoint vs BigFix

Compared 3% of the time

Red Hat Satellite vs BigFix

Compared 2% of the time

More BigFix Competitors

CrowdStrike Falcon vs Tanium

Compared 5% of the time

Microsoft Defender for Endpoint vs Tanium

Compared 4% of the time

Microsoft Configuration Manager vs Tanium

Compared 3% of the time

NinjaOne vs Tanium

Compared 3% of the time

Absolute Secure Endpoint vs Tanium

Compared 2% of the time

More Tanium Competitors

Product Reports

Buyer's Guide

Microsoft Intune

September 2026

Download Microsoft Intune product report

Buyer's Guide

BigFix

September 2026

Download BigFix product report

Buyer's Guide

Tanium

August 2026

Download Tanium product report

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager

Tivoli Endpoint Manager

Tanium Inc Cloud, Tanium XEM

Interactive Demo

Demo not available

Microsoft

HCLSoftware

Demo not available

Tanium

Overview

Microsoft Intune is a cloud-based service designed for device management, security, and compliance. It supports automation and facilitates endpoint management for Windows, iOS, and Android devices, ensuring data protection and efficient policy enforcement.

Microsoft Intune offers seamless integration with tools like Windows Autopilot to automate device setup and deployment. Integrated with Azure Active Directory, it enhances policy management while providing robust reporting and analytics tools for compliance tracking. Despite its intuitive interface aimed at simplifying navigation and device security management, there are challenges such as compatibility issues with Linux and Mac, limited policy support for Android, and demands for better third-party integration. It's widely used for both corporate-owned devices and BYOD scenarios in dynamic IT environments.

What are the key features of Microsoft Intune?

Windows Autopilot: Automates device setup for rapid deployment.
Azure Active Directory Integration: Enhances user policy management.
Reporting and Analytics: Improves compliance visibility.
Mobile Application Management: Ensures app security without compromising personal data.
Cloud-Based Management: Allows management from any location.

What benefits and ROI can users expect?

Time Efficiency: Automation reduces time in policy enforcement and configuration updates.
Enhanced Security: Ensures data protection across corporate-owned and BYOD devices.
Improved Compliance: Advanced reporting tools enhance compliance visibility.
Flexible Management: Cloud-based nature supports management from any location.

In industries such as finance and healthcare, Microsoft Intune is implemented to ensure data protection and compliance with regulatory standards. Manufacturing sectors utilize Intune for managing a distributed workforce across global locations, while educational institutions employ it to secure and manage devices in learning environments supporting both students and faculty.

Microsoft

OVERVIEW:

HCL BigFix is a Unified Endpoint Management (UEM) and automation platform that delivers secure, resilient operations by reducing risk, cost, and operational complexity across on-premises, hybrid, and multi-cloud environments through a centralized control plane.

Built on a single-agent, multi-platform architecture, HCL BigFix unifies infrastructure security, endpoint management, remediation, and digital employee experience automation within a single platform, enabling IT Operations and Security teams to manage more than 165 million endpoints. As AI-driven vulnerability discovery accelerates through frontier models such as Mythos, HCL BigFix helps organizations reduce exposure with near real-time remediation, automated compliance enforcement, and continuous risk reduction. It integrates with leading vulnerability management solutions, including Tenable, Qualys, and Rapid7, and leverages 600,000+ out-of-the-box remediation Fixlets, 50,000+ compliance checks, and a proven >99.5% first-pass patch success rate to help organizations close the gap between vulnerability detection and remediation.

What are BigFix's key features?

Automated Patch & Vulnerability Remediation: Automates patch deployment and vulnerability remediation across workstations, servers, virtual machines, and cloud workloads using 600,000+ out-of-the-box remediation Fixlets.

Compliance Enforcement: Supports continuous compliance through 50,000+ compliance checks, automated policy enforcement, and prebuilt remediation content.

Enterprise Scalability: Manages and secures more than 165 million endpoints across over 120 operating system variants.

Centralized Endpoint Management: Delivers unified visibility and control across distributed environments through a resilient single-agent architecture.

Digital Employee Experience: Powered by AEX, HCL BigFix's agentic AI platform, enabling proactive monitoring, self-healing workflows, intelligent automation, and natural-language interaction.

What are potential benefits and ROI factors?

Reduced Cyber Risk: Near real-time remediation shortens exposure windows as AI-driven vulnerability discovery compresses exploitation timelines.

Lower Operational Costs: Consolidates endpoint management, security, and automation into a single platform, reducing tool sprawl and administrative overhead.

Operational Resilience: Maintains continuous compliance and policy enforcement across distributed environments.

Improved IT Efficiency: Automates routine endpoint operations and vulnerability remediation, reducing manual effort and accelerating response times.

Higher End-User Productivity: Resolves endpoint issues proactively to minimize disruption and improve employee experience.

Organizations across government, financial services, telecommunications, healthcare, manufacturing, and other regulated industries use BigFix for endpoint management, patching, compliance, software distribution, and vulnerability remediation. Support for standards including SCAP 1.3 and NIAP makes BigFix well suited for highly regulated and public-sector environments.

HCLSoftware

Tanium offers robust endpoint protection, patching, and inventory management, consolidating the functions of tools like BigFix with capabilities in incident response, network security, and cloud or on-premise deployments.

Known for real-time capabilities, Tanium provides detailed analytics, security features, and device management. Users benefit from quick implementation, real-time updates, and patching campaigns. Despite its strengths, integration and custom plugin expansion remain areas to improve, along with data visualization and network optimization. Reporting enhancements and user training could advance its usability, and some UI elements may require updates for clarity and security.

What are the essential features of Tanium?

Detailed Analytics: Provides actionable insights for better decision-making.
Security Capabilities: Offers strong defense measures against threats.
Real-Time Queries: Facilitates immediate information access.
Patch Management: Streamlines software updates across devices.
Device Management: Efficiently handles comprehensive inventory and monitoring tasks.

What benefits should users expect?

Ease of Use: Simplifies complex IT tasks.
Scalability: Adapts to growing IT infrastructure needs.
Integration Flexibility: Merges with existing systems effortlessly.
Real-Time Updates: Ensures current data availability for informed actions.

Tanium's deployment spans industries focusing on endpoint protection and compliance, ensuring reliable device and server management in settings where safety and quick adaptation are critical. Organizations use it for application deployment, compliance checks, and integrating it as an EDR solution, enhancing overall security and operational efficiencies.

Tanium

Sample Customers

Mitchells and Buzzers, Callaway

US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation

JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life

Buyer's Guide

BigFix vs. Tanium

September 2026

Free Report: BigFix vs. Tanium

Find out what your peers are saying about BigFix vs. Tanium and other solutions. Updated: September 2026.

DOWNLOAD NOW

914,262 professionals have used our research since 2012.

See our BigFix vs. Tanium report.

See our list of best Endpoint Protection Platform (EPP) vendors, best Unified Endpoint Management (UEM) vendors, and best Autonomous Endpoint Management vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.