Try our new research platform with insights from 80,000+ expert users

BigFix vs Tanium comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 16, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Ranking in Unified Endpoint Management (UEM)
1st
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
304
Ranking in other categories
Configuration Management (2nd), Remote Access (1st), Enterprise Mobility Management (EMM) (1st), Microsoft Security Suite (1st)
BigFix
Ranking in Unified Endpoint Management (UEM)
5th
Average Rating
8.6
Reviews Sentiment
6.6
Number of Reviews
98
Ranking in other categories
Configuration Management (7th), Endpoint Protection Platform (EPP) (26th), Patch Management (4th)
Tanium
Ranking in Unified Endpoint Management (UEM)
11th
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
19
Ranking in other categories
Server Monitoring (6th), Vulnerability Management (25th), Endpoint Protection Platform (EPP) (34th), Endpoint Detection and Response (EDR) (30th)
 

Featured Reviews

AkashKamble - PeerSpot reviewer
Enables management of multiple operating systems with a single license
The best feature is that it's a Microsoft product, so if anything goes wrong, we get quick support for anything required. Remote system functionality allows us to sit anywhere and take control of any device via remote management. We can enhance security for clients' laptops with built-in Microsoft Defender, which is available with the Microsoft Intune license. We use it for reporting purposes through endpoint analytics. When pushing scripting, there are two types available: remediation script and reservation script. Through endpoint analytics, you can push defender policies to clients. It helps with reporting, inventory updates, and monitoring tenant status health.
Ravi Khanchandani - PeerSpot reviewer
Long-term partnership improves customer satisfaction and delivers efficient endpoint management
BigFix supports something known as Patch Policies, which allows users to define that whenever critical patches are released, they should get evaluated against machines and automatically deploy them. Their software distribution is very efficient because they use a pull mechanism rather than a push mechanism, allowing each machine to download from the closest repository and install themselves. The same assessment mechanism applies for real-time vulnerability remediation, allowing identification, evaluation, and automatic remediation across machines. Compliance metrics typically measure the patch percentages deployed against the number of endpoints, which could be various device types including virtual machines and mobile devices. Measurements are taken against each device type, looking into compliance percentages for browsers such as Chrome and Edge based on their versions.
NitinKushwaha - PeerSpot reviewer
Stable product with an ability to build complex roles
We use Tanium as an EDR solution for managing end-user devices and servers The product is granular and can build complex roles compared to other EDR vendors. Tanium's dashboard UI could be similar to CrowdStrike. We have been using Tanium for two and a half years. The product is stable. I rate…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The Autopilot feature is fantastic. It is a Microsoft product, so it deals best with Microsoft operating systems, but it can integrate with iOS, Mac OS, Linux, and Android."
"For our clients, the conditional access feature along with different compliance policies that they can set is valuable."
"The features of Microsoft Intune that I appreciate the most are its user-friendly interface and robust security options."
"Intune significantly simplifies application deployment, mobile application management, and policy enforcement, such as restricting user access to specific applications, thereby enhancing overall environment security."
"The most important thing for me is the autopilot feature."
"We are transforming our flat network by adopting different cloud solutions, and our own applications are hosted in the cloud. Intune ensures our security throughout our entire cloud-based system, improving our security posture."
"I find Microsoft Intune valuable primarily for its Windows management capabilities, along with its Android Enterprise and Apple device management for mobile devices."
"Microsoft Intune's autopilot has been nice to have."
"Before we had BigFix, we had problems with some malware. BigFix allows us to immediately patch all instances of endpoints that were vulnerable to antivirus and initiate scans. That's key."
"It enables us to patch our systems quickly and within expectations and to increase our volume as needed. It has also helped us compress our patch sites. We used to do it monthly but now we do it weekly."
"The patch management and the BigFix Inventory have been the most valuable features."
"My company provides support services to a lot of customers and companies. We have reduced a huge amount of man-effort. Along with the man-effort, we have reduced the timeline to fix the compliance and security gaps. We have an unbroken record. The documentation clearly says that we have done the patching of newly released patches, including Microsoft and third-party patches, in up to 80% of the computers, within 72 hours of the release of the production. That was a very massive benefit that we have seen. When I talk about the 80% endpoints, it is 100 or 200. I am talking about 25,000 endpoints."
"Between the user groups, the community, the AVP support, the direct access via technical route and the PMR support, half the time I don't even need to do a formal PMR because the solutions from the community resolve whatever issues we're having. It's the best community and support based system I've ever used."
"It's easy to use, not complicated."
"BigFix technical support is good."
"Vulnerability scanning and patch automation."
"I like the tool's incident response and security patching."
"The solution is scalable and helps to understand how infrastructure works. It helps to improve the health of the organization."
"I like the fact that you can create patching campaigns depending on the area of your network that you want to address first. I like the ability it has to make several campaigns that work in parallel."
"Threat hunting is a very good feature on Tanium. We have just started using it and have not used it extensively."
"Tanium has made the process of detecting threats more proactive with its detection. So, the process is easier and more efficient."
"I would say Tanium is the best tool for vulnerability management."
"The product is granular and can build complex roles compared to other EDR vendors."
"Tanium's most valuable feature is its instant discovery aspect."
 

Cons

"The solution could improve by having better integration with Apple."
"More integration with monitoring tools is needed."
"There are some issues using the solution with macOS and iOS, and it offers limited granular control with them. Intune works better on Windows and Android."
"The most important thing is reporting. They should improve their reporting. They should give a free hand to users. In SCCM, I can create my own reports. For example, in SCCM, I can create an inventory report for my PC or for all PCs, but in Intune, we don't have an option to create any report. Microsoft claims that Intune is a successor of SCCM, but SCCM is more powerful than Intune. So, they should develop Intune more and make it equivalent to SCCM. Then, their product will be great in the market."
"It would be better if they can reduce the cost of the license."
"Microsoft Intune could be improved by adding short video tutorials or direct links to Microsoft articles in the information button."
"They could also make it easier to use because there are some other products that may be easier to use in terms of the look and feel of the dashboard."
"The product needs to upgrade itself when the server is overloaded."
"Around the scalability concern, I would like to see the ability to run teamed, clustered, or hierarchical root servers, in order to provide a more robust, high availability system. The single monolithic root server model does somewhat bother me."
"The product lacks AI, ML, and IIT."
"I would like to see the integration of user security between the different products to be improved. There's separate security for compliance, separate security for web reports, and the console, and you have to manage those things separately."
"There is no support for patch management on SLES on IBM pSeries (only the Intel platform is supported)."
"The remote software installation could be better."
"I'd definitely like to see additional feature parody in the web UI versus the console. There are certain things that you can only do in the console and they're very cumbersome to do, like secure parameters, for example. That's definitely something that has a wide degree of utility but it needs to be easier to surface. At this particular juncture between the transition, between the legacy console and the web UI, it's hard to justify dealing with the cumbersome aspects of the legacy console when theoretically everything's been through the web UI."
"License management isn't quite as easy as it should be to deal with the licensing. You need to take the server down to import the new licenses which I find to be annoying."
"The sub-capacity licensing was a challenge for some of it. We had trouble getting it to calculate right."
"I would like to have more integrations and custom plugins to input. Integration is always a big deal in a lot of different environments."
"The most painful thing is the interface. It's a bit unclear sometimes."
"We had some issues with the solution's OS upgrade."
"Most of the time, agent-relative issues have to be more equipped with self-healing features. At times, the agent is there, but for some reason, it doesn't report a status. It gives certain problems that are obviously agent-based."
"It is not really additional functions, or the features that are needed, rather the complexity would be reduced based on the number of modules required to put together a comprehensive operational security and risk compliance model."
"Tanium required local admin or root rights on Mac devices, which did not comply with our security policies. This made the solution less suitable for our restrictive environment."
"The solution needs to improve the reporting and tracking capabilities."
"There are some bugs in the product. The tool needs to improve in the area of reporting."
 

Pricing and Cost Advice

"The price for Intune is fair."
"I rate Intune five out of 10 for pricing. It's expensive."
"I don't have any problem as far as cost is concerned. It is bundled with our license."
"Every customer used to purchase licenses based on their needs."
"Most of our clients come to us with licensing already in place. On average, it costs $6 per device per month to add Intune to an Office 365 subscription, but I am not sure."
"On a scale of one to ten with one being the cheapest, the cost of Microsoft Intune is a five."
"For Microsoft 365 E5 clients, cost is not an issue as this product is one of the benefits."
"Licensing depends on how you are providing support to your enterprise, whether it's device-based or user-based."
"The price is very fair."
"The price of the solution is high. There are not any additional fees from the standard license."
"The product is less costly when compared to other solutions, and this is a good solid solution for what we have paid."
"Compliance, inventory, and licensing are really pricey. They should lower the price. It discourages users from getting onboard."
"I would stay with the Managed Virtual Server license model, which is a 1-to-1 license per OS whether it is virtual or physical."
"There's not much big cost. We only have to pay the agents' cost for the server, and for the systems."
"The tool's price continues to go up. The cost per endpoint can vary, ranging from approximately 30 to 80 dollars per year. Compared to other products, pricing is in the middle. You need to buy an additional database license, but most users already have it."
"When purchasing, buying with other IBM tools provided us with a very good discount in pricing."
"It is higher than some competitors in the market."
"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."
"The solution offers value for money."
"There is an annual license required to use this solution."
"It's an expensive solution. It would be nice if the cost were lower."
"The product's pricing differs from region to region depending on negotiations and the number of endpoints."
"The solution is expensive but it's a good investment."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
870,701 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
10%
Manufacturing Company
9%
Government
8%
Financial Services Firm
15%
Government
10%
Manufacturing Company
9%
Computer Software Company
8%
Financial Services Firm
16%
Government
12%
Manufacturing Company
8%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business116
Midsize Enterprise46
Large Enterprise152
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise12
Large Enterprise66
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise3
Large Enterprise11
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What do you like most about BigFix?
The most valuable features of the solution are Windows patching and the hardware and software inventory.
What is your experience regarding pricing and costs for BigFix?
The pricing is pretty good and now follows a subscription model similar to other major software solutions, making it ...
What needs improvement with BigFix?
The reporting still needs improvement since customers want specific reporting, such as N-1 month patching reports. In...
What do you like most about Tanium?
The product is granular and can build complex roles compared to other EDR vendors.
What needs improvement with Tanium?
While there is always room for improvement, I am pleased with Tanium.
What is your primary use case for Tanium?
The primary use case for Tanium ( /products/tanium-reviews ) is compliance, patching, and inventory as part of the co...
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
Tivoli Endpoint Manager
Tanium Inc Cloud, Tanium XEM
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life
Find out what your peers are saying about BigFix vs. Tanium and other solutions. Updated: September 2025.
870,701 professionals have used our research since 2012.