BigFix vs Tanium comparison

Why PeerSpot?

HCLSoftware and Tanium are both solutions in the Endpoint Protection Platform (EPP) category. HCLSoftware is ranked #21 with an average rating of 8.5, while Tanium is ranked #13 with an average rating of 8.3. Additionally, 97% of HCLSoftware users are willing to recommend the solution, compared to 82% of Tanium users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 18, 2026

BigFix and Tanium compete in the endpoint management category. While each has strengths, Tanium often has the upper hand due to its feature robustness and scalability despite higher costs.

Features: BigFix offers comprehensive client management, impressive inventory capabilities, and customization through APIs. It's known for scalability, real-time visibility, and robust automation across platforms. Tanium provides efficient patch management, excellent real-time data aggregation, and powerful query options. Its integrated security and IT operations offer valuable real-time analytics and broad endpoint management.

Room for Improvement: BigFix could improve documentation, dynamic messaging, and the web console. Users desire advancements in automation, multithreading, and broader database support. Tanium faces challenges with pricing complexity and interface clarity. Users request better scaling, network optimization, and refined threat intelligence features.

Ease of Deployment and Customer Service: BigFix is largely deployed on-premises, with strong technical support under HCL's management. Users praise the responsiveness and helpful community. Tanium excels in flexible cloud deployments, offering high customer satisfaction through reliable support, though occasional support reliability issues are noted.

Pricing and ROI: BigFix offers competitively priced packages perceived as good value, with users seeing ROI often within months. Tanium is more expensive but justified by its robust features and management efficiency, providing strong returns especially in large-scale environments.

To learn more, read our detailed BigFix vs. Tanium Report (Updated: October 2026).

Buyer's Guide

BigFix vs. Tanium

October 2026

Download the complete report

Helped 921,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Microsoft Intune

Featured Reviews

Anumula Hitesh

Senior Business Development Executive at Digitaltrack

Centralized device management has automated onboarding and improves remote security compliance

One thing I feel Microsoft Intune could improve is troubleshooting visibility. In many cases, when a policy or application deployment fails, the error messages are a bit generic. So, admins still spend time checking logs manually or testing on devices one by one. Compared to the simplicity of deployment, troubleshooting sometimes feels less mature. I also think reporting and real-time monitoring could be stronger. The dashboard gives useful information, but in large environments, many teams still depend on additional tools or scripts for deeper reporting and analytics. If I had to focus on one area first, I would probably choose troubleshooting and reporting. Deployment through Microsoft Intune is generally straightforward, but when something fails, identifying the exact root cause can still take more time than expected. Error messages are sometimes too generic, and admins often have to dig through logs, sync status, or multiple portals to understand what actually happened. I think user experience and policy management could also improve further. Microsoft Intune has become much better over the years, but sometimes the admin portal still feels fragmented because certain configurations open in different sections or redirect to older interfaces. For new admins, especially, it can take time to understand where everything is located. Another thing is policy conflict handling. In larger organizations, multiple device policies, compliance rules, and configuration profiles can overlap. When conflicts happen, the visibility is not always very clear, so admins spend time figuring out which policy actually won or caused the issue.

Read full review

InderjeetSingh4

Administrator at a tech vendor with 10,001+ employees

End-to-end automation has simplified patching and software deployment across thousands of servers

There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initiated through the patch policy, it appears on the console but arrives in chunks. When targeting hundreds of servers from the patch policy, the actions come in chunks such as ten out of six, ten out of nine, or ten out of fifteen. This fragmented approach creates a significant challenge for the patching team to monitor the action status. I would recommend that the development team provide a single action or one to two actions instead of multiple actions requiring individual monitoring. A broad status update could be provided to the client indicating the overall progress of the patch policy implementation rather than requiring monitoring of every individual action. This would reduce the bandwidth required by the team to track multiple actions on the console.

Read full review

Sandeepraj Gatla

Dfir Analyst at a tech services company with 201-500 employees

Endpoint monitoring has strengthened incident response and provides rapid isolation and forensics

Tanium provides an endpoint which is isolated from the network and environment. We can easily search its logs and history and connect remotely directly to that particular device which has been isolated from the network. We can search for the history and logs, including audit logs and event logs. The complete activity of the user or owner of the device is visible to us. We can see the artifacts of particular USB transfers internally for official use. We can not only connect remotely but also see the device status and how many failures have occurred within the network so far. We can see the IP address, how many times it has changed its IP address, and how many times it was connected to VPN or external VPN or internal VPN and what has been searched while on VPN. We can block the IOCs or IP addresses as well. We can block domains, hashes, SHA values, SHA-256, SHA-1, SHA-5 and MD5. Although I am not completely involved in the automation team, we do have that team and I have worked in some CERT recently. Tanium is more useful while we are in the CERT because most of the times when we are on high alert, Tanium does play a main role for that particular incident or any high case. Tanium is a simple tool and we can easily integrate it to many devices and it is a mandatory tool to secure an endpoint. It is mandatory to give any RDP connection and the tool should be present in the particular device. It is completely mandatory and it is in the policy as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Overall, Microsoft Intune has been a strong fit for modern endpoint management, especially for remote and hybrid environments, and it keeps improving as Microsoft expands the platform."

"We saw approximately forty to fifty percent reduction in manual device setup time with Microsoft Intune as onboarding became fully automated."

"The Asset Management and Auto Pilot are valuable features."

"I can control applications, and I can secure applications by using the MAM policy, which is very effective and very helpful in protecting our users' data on mobile devices such as iPhones and Android phones."

"I am very satisfied that when any user comes into our organization and we provide the user ID and password, the setup will auto-complete with basic applications and security installed automatically, making the device ready within approximately ten to fifteen minutes."

"I would say that it is at the top of the list when it comes to the competition."

"Intune enables us to manage our devices from anywhere."

"The product is very useful in terms of Windows Information Protection."

More Microsoft Intune pros

"The software is dynamic enough that there is very little that you cannot manage remotely."

"It has saved us maybe millions in funds."

"I’ve found patching to be the most valuable feature of the solution."

"It is user-friendly."

"We basically use it as our master source and then, from that, it helps us provide a source of truth."

"The most valuable point is when you deploy an application, you have to make sure that the application has been deployed to all computers and that is working perfectly. This solution works well at deployments."

"We've had no issues with stability."

"Patch management: We've gone from hideous to amazing."

More BigFix pros

"Tanium’s best features include support for any Windows, Linux, or Mac endpoint, regardless of where it is, and the ability to do IT operations and security operations."

"For incident response tasks, all these tasks can get done in minutes with minimal disruption to the end-user."

"The interrogation piece was the most valuable feature because it was very detailed."

"The solution's technical support is very responsive."

"Tanium's most valuable feature is its instant discovery aspect."

"It's definitely not complex, it is pretty user-friendly and it's a solid tool enterprise to use."

"The security features are very valuable."

"Tanium is excellent for emergency troubleshooting as it gives you real-time data on your client, including last log in, last activity, whether it has taken any of the more recent updates, its current level, and provides information down to the serial number."

More Tanium pros

Cons

"Regarding mobile devices, Intune is good, but there are other services that I would say are ahead of Intune from an administration and reporting point of view."

"Enrollment into the Microsoft Intune service can still get easier, especially for legacy-managed systems, such as how we get it from a GPO or an SCCM configuration into Intune."

"There needs to be more support for Mac operating systems."

"The worst aspect is the reporting."

"Microsoft Intune needs to support out of the box Apple Managed Device and Apple Business Managed Device with zero-touch deployment capabilities, which is something competitors provide."

"The documentation about the custom image setup could be better. Although Microsoft provides the steps to configure Intune or set up or deploy Intune, it doesn't have much information related to custom images. If you ask, "how can we deploy the custom image?" There is no information. The steps they mention ask you to connect to your on-premises environment or create your own image on the cloud itself once there is connectivity. But I needed to go to multiple websites to get all this information. I had to figure out how to upload the custom image if you want to use the on-premise custom image for Cloud PC. If you have the proper subscription, you must have the right access, like global admin or owner. Then you can add your custom image to that. There are no steps mentioned over there. Microsoft Intune doesn't have Chrome browser support. I would like to have that support because they will want it if we pitch the product to clients."

"I find the price for Microsoft Intune too high, which represents an area for improvement in Microsoft's pricing model."

"I expect Microsoft Intune to have more features in the cloud because there are two major functionalities that we need to be added. This is software metering and license management. These functionalities, for now, must be on-premise. For this purpose, we have set up a SQL Server and I hope that in near future this option will be in the cloud in Microsoft Intune."

More Microsoft Intune cons

"BigFix can improve the way machines report back to the console."

"For improvements, it would be good if BigFix supported more databases. Currently, it only supports DB2 and Microsoft SQL. Adding support for other databases like Oracle would be beneficial."

"Technical support depends on who you get. I deal with some amazing support folks, and then I've dealt with some less-than-amazing support folks."

"Sometimes the workstations communicate back to the BigFix server two or three days in a week or something similar. Sometimes there can be a delay reporting back to the server for a variety of reasons, such as users turning their computer off when they go home. When the user comes back and turns the computer back on BigFix needs to synchronize and sometimes it can take some time, approximately one week. The communication between the agent and the server should be faster, there is room for improvement in this area."

"While performing integration, we face many issues with IBM solution. We need detailed information about those issues that can help users to mitigate them."

"A large infrastructure is required to implement BigFix for a medium-sized organization."

"The stability is generally pretty good. The one thing that we came across is the battle between load on endpoints and load on our servers and relays versus how quickly, effectively and reliably actions can be taken. I'd like to not have to take an action on a system while I'm working with someone and then have to say whether something will happen between five seconds or thirty minutes from that point."

"Technical support has sometimes been very good, and sometimes it's been not so good."

More BigFix cons

"Tanium's limitations should be improved because although it is a great tool, it is limited to only a few classes during a session."

"Our biggest issue with the solution is its lack of mobility."

"We set a policy to block USB access. The moment a device is being set up on the network, I apply the policy, but it does not come into effect immediately."

"We had some issues with the solution's OS upgrade."

"Tanium’s scalability could be improved."

"The only improvement I can think of for Tanium would be a little faster access to the internet and to the cloud portion, as clients are reporting that while we are getting great data, we always need to have great data outputs."

"Any movement into a SaaS solution has challenges since the processes and data flows are not well defined. Hence, you need to build it at the same time."

"I would like to have more integrations and custom plugins to input. Integration is always a big deal in a lot of different environments."

More Tanium cons

Pricing and Cost Advice

"I recently got to know that the AD P1 license is compulsory to use Intune Autopilot, which was surprising for me. Earlier, this was not the case. It is the wrong thing to do. We now need to purchase AD P1 licenses for us and for our customers. I would rate it a seven out of ten for pricing."

"The pricing is good because customers are not complaining about it."

"There is a cost benefit of using Microsoft Intune because of the packaging with other Microsoft products."

"Microsoft licenses are costly."

"It is not expensive."

"While Microsoft charges for actual usage, it lacks discount options."

"The pricing is competitive, but it is not cheap."

"They have categorized the licenses according to the size of the business. So, if it's a smaller organization, we can choose the license accordingly. If it's a big organization, then we can choose accordingly. Everything is clearly mentioned, and we can decide. It's suitable for all kinds of infrastructure, and that's very goo"

More Microsoft Intune pricing and cost advice

"You get what we call the Platform Edition, which you get for free. The patch service is maybe $0.50 per workstation per month. Then there's the basic server cost, which is about $1.50 per server per month. You also get into Lifecycle which does power management, OSD remote control, and those types of things, and that might be about 10 times the price - which works out to about $13 per server and, maybe $5 per workstation per month."

"When purchasing, buying with other IBM tools provided us with a very good discount in pricing."

"So, the pricing is slightly more expensive than the others. I have to keep buying licenses every time I add a new device."

"It is too costly. It is one of the best tools, but because of pricing, not all clients support it. Its licensing is on a yearly basis."

"It might be about $23 a client."

"There's not much big cost. We only have to pay the agents' cost for the server, and for the systems."

"The product is less costly when compared to other solutions, and this is a good solid solution for what we have paid."

"Compliance, inventory, and licensing are really pricey. They should lower the price. It discourages users from getting onboard."

More BigFix pricing and cost advice

"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."

"It's an expensive solution. It would be nice if the cost were lower."

"The product's pricing differs from region to region depending on negotiations and the number of endpoints."

"There is an annual license required to use this solution."

"It is higher than some competitors in the market."

"The solution offers value for money."

"The solution is expensive but it's a good investment."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

921,028 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

10%

Financial Services Firm

10%

Outsourcing Company

10%

Computer Software Company

Financial Services Firm

13%

Manufacturing Company

10%

Outsourcing Company

Construction Company

Financial Services Firm

14%

Manufacturing Company

Government

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	195
Midsize Enterprise	64
Large Enterprise	190

By reviewers
Company Size	Count
Small Business	30
Midsize Enterprise	12
Large Enterprise	68

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	4
Large Enterprise	12

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?

Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...

See all answers

What are the pros and cons of Microsoft Intune?

Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...

See all answers

How does Google Cloud Identity compare with Microsoft Intune?

Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...

See all answers

What is your experience regarding pricing and costs for BigFix?

I rate the price for BigFix as medium, neither low nor high.

See all answers

What needs improvement with BigFix?

There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initia...

See all answers

What is your primary use case for BigFix?

My current use case involves being one of the products and one of the clients implementing this tool.

See all answers

What needs improvement with Tanium?

While there is always room for improvement, I am pleased with Tanium.

See all answers

What is your primary use case for Tanium?

The primary use case for Tanium ( /products/tanium-reviews ) is compliance, patching, and inventory as part of the co...

See all answers

What advice do you have for others considering Tanium?

For smaller companies, Tanium is quite a big investment, and one needs to have a considerable setup to make it econom...

See all answers

Comparisons

IBM MaaS360 vs Microsoft Intune

Compared 13% of the time

Jamf Pro vs Microsoft Intune

Compared 10% of the time

Workspace ONE UEM vs Microsoft Intune

Compared 5% of the time

Microsoft Entra ID vs Microsoft Intune

Compared 3% of the time

Samsung Knox vs Microsoft Intune

Compared 2% of the time

More Microsoft Intune Competitors

Red Hat Ansible Automation Platform vs BigFix

Compared 5% of the time

Microsoft Configuration Manager vs BigFix

Compared 3% of the time

Check Point Harmony Endpoint vs BigFix

Compared 3% of the time

Trellix Endpoint Security Platform vs BigFix

Compared 3% of the time

Kaspersky Next XDR Optimum vs BigFix

Compared 2% of the time

More BigFix Competitors

CrowdStrike Falcon vs Tanium

Compared 5% of the time

Microsoft Defender for Endpoint vs Tanium

Compared 4% of the time

Microsoft Configuration Manager vs Tanium

Compared 3% of the time

Symantec Endpoint Security vs Tanium

Compared 3% of the time

Qualys Exposure Management vs Tanium

Compared 2% of the time

More Tanium Competitors

Product Reports

Buyer's Guide

Microsoft Intune

October 2026

Download Microsoft Intune product report

Buyer's Guide

BigFix

November 2026

Download BigFix product report

Buyer's Guide

Tanium

October 2026

Download Tanium product report

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager

Tivoli Endpoint Manager

Tanium Inc Cloud, Tanium XEM

Interactive Demo

Demo not available

Microsoft

HCLSoftware

Demo not available

Tanium

Overview

Microsoft Intune is a cloud-based service designed for device management, security, and compliance. It supports automation and facilitates endpoint management for Windows, iOS, and Android devices, ensuring data protection and efficient policy enforcement.

Microsoft Intune offers seamless integration with tools like Windows Autopilot to automate device setup and deployment. Integrated with Azure Active Directory, it enhances policy management while providing robust reporting and analytics tools for compliance tracking. Despite its intuitive interface aimed at simplifying navigation and device security management, there are challenges such as compatibility issues with Linux and Mac, limited policy support for Android, and demands for better third-party integration. It's widely used for both corporate-owned devices and BYOD scenarios in dynamic IT environments.

What are the key features of Microsoft Intune?

Windows Autopilot: Automates device setup for rapid deployment.
Azure Active Directory Integration: Enhances user policy management.
Reporting and Analytics: Improves compliance visibility.
Mobile Application Management: Ensures app security without compromising personal data.
Cloud-Based Management: Allows management from any location.

What benefits and ROI can users expect?

Time Efficiency: Automation reduces time in policy enforcement and configuration updates.
Enhanced Security: Ensures data protection across corporate-owned and BYOD devices.
Improved Compliance: Advanced reporting tools enhance compliance visibility.
Flexible Management: Cloud-based nature supports management from any location.

In industries such as finance and healthcare, Microsoft Intune is implemented to ensure data protection and compliance with regulatory standards. Manufacturing sectors utilize Intune for managing a distributed workforce across global locations, while educational institutions employ it to secure and manage devices in learning environments supporting both students and faculty.

Microsoft

HCL BigFix is a Unified Endpoint Management (UEM) and automation platform that delivers secure, resilient operations by reducing risk, cost, and operational complexity across on-premises, hybrid, and multi-cloud environments through a centralized control plane.

Built on a single-agent, multi-platform architecture, HCL BigFix unifies infrastructure security, endpoint management, remediation, and digital employee experience automation within a single platform, enabling IT Operations and Security teams to manage more than 165 million endpoints. As AI-driven vulnerability discovery accelerates through frontier models such as Mythos, HCL BigFix helps organizations reduce exposure with near real-time remediation, automated compliance enforcement, and continuous risk reduction. It integrates with leading vulnerability management solutions, including Tenable, Qualys, and Rapid7, and leverages 600,000+ out-of-the-box remediation Fixlets, 50,000+ compliance checks, and a proven >99.5% first-pass patch success rate to help organizations close the gap between vulnerability detection and remediation.

What are BigFix's key features?

Automated Patch & Vulnerability Remediation: Automates patch deployment and vulnerability remediation across workstations, servers, virtual machines, and cloud workloads using 600,000+ out-of-the-box remediation Fixlets.

Compliance Enforcement: Supports continuous compliance through 50,000+ compliance checks, automated policy enforcement, and prebuilt remediation content.

Enterprise Scalability: Manages and secures more than 165 million endpoints across over 120 operating system variants.

Centralized Endpoint Management: Delivers unified visibility and control across distributed environments through a resilient single-agent architecture.

Digital Employee Experience: Powered by AEX, HCL BigFix's agentic AI platform, enabling proactive monitoring, self-healing workflows, intelligent automation, and natural-language interaction.

What are potential benefits and ROI factors?

Reduced Cyber Risk: Near real-time remediation shortens exposure windows as AI-driven vulnerability discovery compresses exploitation timelines.

Lower Operational Costs: Consolidates endpoint management, security, and automation into a single platform, reducing tool sprawl and administrative overhead.

Operational Resilience: Maintains continuous compliance and policy enforcement across distributed environments.

Improved IT Efficiency: Automates routine endpoint operations and vulnerability remediation, reducing manual effort and accelerating response times.

Higher End-User Productivity: Resolves endpoint issues proactively to minimize disruption and improve employee experience.

Organizations across government, financial services, telecommunications, healthcare, manufacturing, and other regulated industries use BigFix for endpoint management, patching, compliance, software distribution, and vulnerability remediation. Support for standards including SCAP 1.3 and NIAP makes BigFix well suited for highly regulated and public-sector environments.

HCLSoftware

Tanium offers robust endpoint protection, patching, and inventory management, consolidating the functions of tools like BigFix with capabilities in incident response, network security, and cloud or on-premise deployments.

Known for real-time capabilities, Tanium provides detailed analytics, security features, and device management. Users benefit from quick implementation, real-time updates, and patching campaigns. Despite its strengths, integration and custom plugin expansion remain areas to improve, along with data visualization and network optimization. Reporting enhancements and user training could advance its usability, and some UI elements may require updates for clarity and security.

What are the essential features of Tanium?

Detailed Analytics: Provides actionable insights for better decision-making.
Security Capabilities: Offers strong defense measures against threats.
Real-Time Queries: Facilitates immediate information access.
Patch Management: Streamlines software updates across devices.
Device Management: Efficiently handles comprehensive inventory and monitoring tasks.

What benefits should users expect?

Ease of Use: Simplifies complex IT tasks.
Scalability: Adapts to growing IT infrastructure needs.
Integration Flexibility: Merges with existing systems effortlessly.
Real-Time Updates: Ensures current data availability for informed actions.

Tanium's deployment spans industries focusing on endpoint protection and compliance, ensuring reliable device and server management in settings where safety and quick adaptation are critical. Organizations use it for application deployment, compliance checks, and integrating it as an EDR solution, enhancing overall security and operational efficiencies.

Tanium

Sample Customers

Mitchells and Buzzers, Callaway

US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation

JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life

Buyer's Guide

BigFix vs. Tanium

October 2026

Free Report: BigFix vs. Tanium

Find out what your peers are saying about BigFix vs. Tanium and other solutions. Updated: October 2026.

DOWNLOAD NOW

921,028 professionals have used our research since 2012.

See our BigFix vs. Tanium report.

See our list of best Endpoint Protection Platform (EPP) vendors, best Unified Endpoint Management (UEM) vendors, and best Autonomous Endpoint Management vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.