No more typing reviews! Try our Samantha, our new voice AI agent.

BigFix vs Tanium comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 18, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Ranking in Unified Endpoint Management (UEM)
1st
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
377
Ranking in other categories
Configuration Management (1st), Remote Access (2nd), Enterprise Mobility Management (EMM) (1st), Microsoft Security Suite (1st)
BigFix
Ranking in Unified Endpoint Management (UEM)
11th
Average Rating
8.6
Reviews Sentiment
6.4
Number of Reviews
100
Ranking in other categories
Configuration Management (9th), Endpoint Protection Platform (EPP) (23rd), Patch Management (8th), Autonomous Endpoint Management (6th)
Tanium
Ranking in Unified Endpoint Management (UEM)
8th
Average Rating
7.8
Reviews Sentiment
6.2
Number of Reviews
23
Ranking in other categories
Vulnerability Management (24th), Endpoint Protection Platform (EPP) (12th), Endpoint Detection and Response (EDR) (20th), Autonomous Endpoint Management (3rd)
 

Featured Reviews

HA
Senior Business Development Executive at Digitaltrack
Centralized device management has automated onboarding and improves remote security compliance
One thing I feel Microsoft Intune could improve is troubleshooting visibility. In many cases, when a policy or application deployment fails, the error messages are a bit generic. So, admins still spend time checking logs manually or testing on devices one by one. Compared to the simplicity of deployment, troubleshooting sometimes feels less mature. I also think reporting and real-time monitoring could be stronger. The dashboard gives useful information, but in large environments, many teams still depend on additional tools or scripts for deeper reporting and analytics. If I had to focus on one area first, I would probably choose troubleshooting and reporting. Deployment through Microsoft Intune is generally straightforward, but when something fails, identifying the exact root cause can still take more time than expected. Error messages are sometimes too generic, and admins often have to dig through logs, sync status, or multiple portals to understand what actually happened. I think user experience and policy management could also improve further. Microsoft Intune has become much better over the years, but sometimes the admin portal still feels fragmented because certain configurations open in different sections or redirect to older interfaces. For new admins, especially, it can take time to understand where everything is located. Another thing is policy conflict handling. In larger organizations, multiple device policies, compliance rules, and configuration profiles can overlap. When conflicts happen, the visibility is not always very clear, so admins spend time figuring out which policy actually won or caused the issue.
InderjeetSingh4 - PeerSpot reviewer
Administrator at a tech vendor with 10,001+ employees
End-to-end automation has simplified patching and software deployment across thousands of servers
There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initiated through the patch policy, it appears on the console but arrives in chunks. When targeting hundreds of servers from the patch policy, the actions come in chunks such as ten out of six, ten out of nine, or ten out of fifteen. This fragmented approach creates a significant challenge for the patching team to monitor the action status. I would recommend that the development team provide a single action or one to two actions instead of multiple actions requiring individual monitoring. A broad status update could be provided to the client indicating the overall progress of the patch policy implementation rather than requiring monitoring of every individual action. This would reduce the bandwidth required by the team to track multiple actions on the console.
Sandeepraj Gatla - PeerSpot reviewer
Dfir Analyst at a tech services company with 201-500 employees
Endpoint monitoring has strengthened incident response and provides rapid isolation and forensics
Tanium provides an endpoint which is isolated from the network and environment. We can easily search its logs and history and connect remotely directly to that particular device which has been isolated from the network. We can search for the history and logs, including audit logs and event logs. The complete activity of the user or owner of the device is visible to us. We can see the artifacts of particular USB transfers internally for official use. We can not only connect remotely but also see the device status and how many failures have occurred within the network so far. We can see the IP address, how many times it has changed its IP address, and how many times it was connected to VPN or external VPN or internal VPN and what has been searched while on VPN. We can block the IOCs or IP addresses as well. We can block domains, hashes, SHA values, SHA-256, SHA-1, SHA-5 and MD5. Although I am not completely involved in the automation team, we do have that team and I have worked in some CERT recently. Tanium is more useful while we are in the CERT because most of the times when we are on high alert, Tanium does play a main role for that particular incident or any high case. Tanium is a simple tool and we can easily integrate it to many devices and it is a mandatory tool to secure an endpoint. It is mandatory to give any RDP connection and the tool should be present in the particular device. It is completely mandatory and it is in the policy as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"My advice for those implementing Microsoft Intune is to proceed with it; there is no other software that can perform the job better, and Microsoft offers extensive experience with a mature ecosystem, so I recommend going for it."
"The security features are most definitely valuable. If I have to give an example, the lockdown features that prevent employees from configuring anything or downloading company data are valuable. We get high-quality device protection, malware protection, and information protection at the same time."
"The solution is fully integrated with the Microsoft platform and the Autopilot feature, which is a unique feature."
"The best part of Intune is device control. If we need to block a user from opening something in their organization's system, we can do it from Intune. If we want to restrict the movement of an organization's data to prevent users from copying the data into Outlook, WhatsApp, or their personal Gmail, we can limit that via Intune. It secures all corporate data."
"After implementing Microsoft Intune, we have seen a 50 to 70% reduction in device provisioning time and a 30 to 40% reduction in routine endpoint management efforts, allowing our IT team to focus less on routine management and providing faster software deployment while experiencing a significant reduction in support tickets."
"The system itself is great."
"The automatic patch management feature in the Intune Suite is helpful."
"If any user tries to access company data, it directly interacts with the conditional access policy. This helps us protect our data and set the criteria for how data can be accessed and shared."
"I recommend BigFix to others."
"If you utilize the tool to the maximum capacity available to you, your ROI is significantly five to seven-fold over cost."
"Before we had BigFix, we had problems with some malware. BigFix allows us to immediately patch all instances of endpoints that were vulnerable to antivirus and initiate scans. That's key."
"Due to the automation, we've been able to prevent a lot of human errors with BigFix so it's reduced our help desk calls by 50%."
"It's easy to use, not complicated."
"It represents to a customer a very strong and quick ROI, so the investment and value becomes very positive early on."
"It is user-friendly."
"I would recommend this solution to others."
"Tanium is highly scalable."
"Threat hunting is a very good feature on Tanium. We have just started using it and have not used it extensively."
"I would say Tanium is the best tool for vulnerability management."
"Tanium's most valuable feature is its instant discovery aspect."
"The interrogation piece was the most valuable feature because it was very detailed."
"I'm not so familiar with the tool but I like the interaction of the console to the picture. Patching is the primary model I have been focusing on for the last couple of weeks. So I have created a proof of concept environment and have been checking the available features."
"The security features are very valuable."
"I like the tool's incident response and security patching."
 

Cons

"We are facing issues with Apple products. With macOS and iOS, there are some difficulties with the updates because we cannot get full control of Apple products. In the case of Windows, it is fine, but in the case of Apple, we have some difficulties. We cannot control everything through Intune."
"It would be nice to have a location tracker for the mobile device management tool. I'm not sure if it exists but hasn't been configured or if it's missing, but we've been unable to utilize the location features."
"It would be better if I could integrate it with my core group policy. I would like to have a group policy in my current environment, which has strict control, but those things are still missing. Although it has maximum compliance and security, it's not available on-premise."
"Since GMS is unavailable in China, we currently rely on device administrator enrollment for managing Android devices there."
"Intune's server management could be better. If it could incorporate more features from System Center into Intune's Configuration Manager, it would be beneficial."
"Microsoft needs to strategize its licensing structure. When using Microsoft Intune, we bought a small scale of controls, only controlling part of the devices, though Microsoft Intune can do much more. The Intune Suite offers more features, allowing extensive integration with either internal or cloud environments without requiring third-party licensing. However, each feature has a separate license, making logistics and cost management difficult if not strategically bundled together."
"There are differences in protecting the data on a mobile device and on iOS. When you protect the data on iOS, you protect the entire device."
"Areas for improvement in Intune include expanding support beyond Samsung devices to accommodate other Android manufacturers like Redmi and Motorola."
"It can be improved speed-wise. They can make it a little bit light. If you do any query for servers in bulk, it can take some time. Similarly, creating a job can take some time."
"I would like the dashboard to be improved to show the problematic machines and good machines."
"I would like to see API connectivity, built-in API connectors to the standard toolsets, whether it's for your ServiceNow or your Qualys. More API connectivity to make it easier to integrate to other tools."
"The solution needs to improve console speed. I would like to see one console that does everything. It doesn't need to have a big client console."
"BigFix is actually a little bit on the expensive side in Turkey because of the dollar's exchange rate in our currency."
"I would like better support on the backend."
"The reporting structure could be a little more simplistic. Currently, it throws too many vulnerabilities. Some of them are not needed because they are only informational and limitations, and they are not of much help. It doesn't need to show us these things."
"The tool should be more friendly in terms of Web UI and should be having better vulnerability scanning mechanisms so a third-party application is not required to fulfill that aspect."
"The solution lacks mobility."
"The problem or challenge is a pre-sales and go-to strategy for the SMB market delivered through a channel or model. It's very convoluted and vague, which leads to some confusion about the various types of modules, and the device-to-seat cost is extremely difficult to calculate."
"Tanium's limitations should be improved because although it is a great tool, it is limited to only a few classes during a session."
"They could improve the UI."
"I would like to have more integrations and custom plugins to input. Integration is always a big deal in a lot of different environments."
"Tanium required local admin or root rights on Mac devices, which did not comply with our security policies. This made the solution less suitable for our restrictive environment."
"The most painful thing is the interface. It's a bit unclear sometimes."
"The solution needs to improve the reporting and tracking capabilities."
 

Pricing and Cost Advice

"The overall pricing of Microsoft Intune is good for companies that have big IT budgets, 3,000 or more users and devices."
"Every customer used to purchase licenses based on their needs."
"I don't have any problem as far as cost is concerned. It is bundled with our license."
"The cost of the license and the features are justified for myself as a technical person."
"The pricing is competitive, but it is not cheap."
"We spend a lot of money on Intune licensing, and some of our users have to be double licensed just because of how our dev and corporate environments are segmented."
"The E5 license is expensive."
"It comes as a bundle, so you do not really know what the prices are. Microsoft does not break it down to the user cost for us. It is just bundled with our E5 license."
"The price of BigFix is better than the solutions. You are able to pay monthly or annually. There are not any hidden costs with BigFix. There is an additional cost for the SQL database."
"You are charged per server and per workstation when using BigFix. ManageEngine is a lot cheaper than BigFix. There are some additional costs, such as support."
"The price is very fair."
"Compliance, inventory, and licensing are really pricey. They should lower the price. It discourages users from getting onboard."
"The price of the solution is high. There are not any additional fees from the standard license."
"I can estimate the reduced cost of servers maintenance to approximatively $500,000."
"Its price is very reasonable."
"There's not much big cost. We only have to pay the agents' cost for the server, and for the systems."
"The solution is expensive but it's a good investment."
"The product's pricing differs from region to region depending on negotiations and the number of endpoints."
"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."
"It's an expensive solution. It would be nice if the cost were lower."
"There is an annual license required to use this solution."
"It is higher than some competitors in the market."
"The solution offers value for money."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
914,262 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
9%
Financial Services Firm
9%
Outsourcing Company
9%
Computer Software Company
7%
Financial Services Firm
13%
Outsourcing Company
9%
Manufacturing Company
8%
Construction Company
6%
Financial Services Firm
13%
Government
9%
Manufacturing Company
9%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business192
Midsize Enterprise62
Large Enterprise187
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise12
Large Enterprise68
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise4
Large Enterprise12
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What is your experience regarding pricing and costs for BigFix?
I rate the price for BigFix as medium, neither low nor high.
What needs improvement with BigFix?
There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initia...
What is your primary use case for BigFix?
My current use case involves being one of the products and one of the clients implementing this tool.
What needs improvement with Tanium?
While there is always room for improvement, I am pleased with Tanium.
What is your primary use case for Tanium?
The primary use case for Tanium ( /products/tanium-reviews ) is compliance, patching, and inventory as part of the co...
What advice do you have for others considering Tanium?
For smaller companies, Tanium is quite a big investment, and one needs to have a considerable setup to make it econom...
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
Tivoli Endpoint Manager
Tanium Inc Cloud, Tanium XEM
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life
Find out what your peers are saying about BigFix vs. Tanium and other solutions. Updated: September 2026.
914,262 professionals have used our research since 2012.