HCL BigFix vs. Qualys TruRisk Platform

BigFix is well suited for patch review and deployment, but there are key features that can definitely be improved. An example is that if a specific patch is deployed, but a cumulative update that contains that patch is not deployed, the system still shows the patch as outstanding or not implemented. Another area for improvement is the customization of BigFix. The tool has many uses and can be extremely helpful, but the amount of knowledge required to customize the solution is significant and customized scripts or "fixlets" need to be created. If common things could be pre-packaged and provided to the customer community, it would allow for an easier deployment and use of the tool.

Incentivized

It is well suited for environments that are looking for a solution that is top notch for vulnerability scanning, and is the most accurate at doing so. It would also fit environments that have a lot of endpoints to scan or like to have scanning done on an automatic basis. It is less appropriate in environments that want to use a platform right away, without getting training in how to use it, or reading documentation on the product.

Incentivized

• Custom patch packages are easy to set up and allows for use with a repository.
• Asset management by use of agents is simple and allows for user assignment by the device.
• Reporting has a large variety of templates.

Incentivized

• Attestation is so easy with Qualys. I find this one feature makes the investment worth the cost
• Ease of use. Within an hour of first installing, a person can be running compliance tests without a hitch.
• Great training materials and support. I have never had to take more than twenty minutes to solve a problem either through support or the forums.

Incentivized

• No console for macOS
• No easy setup UI for macOS users
• Patching can be complicated if you don't understand relevance
• Patching can be complicated it you don't understand scripting
• Could be better in helping with CIS Benchmarks

Incentivized

• Notices some findings which were not clear why they appear(suspected false positive).
• Working with Qualys support(for example due to the previous point) wasn't the best experience. the response was very slow.
• Qualys limit the daily API requests. In case you need more, it will cost.

Incentivized

Again, the usability of Qualys has been a pinpoint for this entire review. It was easily the worst thing about the product and because of this, I would not recommend Qualys to anybody in my field. This should be something that Qualys strives to improve if they wish to stay in business.

Incentivized

While some support calls are quickly responded to, many times our engineers have been pointed to collaborative web sites such as Bigfix.me for solutions or the option of engaging professional services has been proposed. While this may seem like a good way to drive business, it is not seen as efficient a support process as could be provided to the customer base.

Incentivized

They had a support page within the WAS to report any concerns or seek help. But the UI of that is not smooth. Regardless support staff were pretty responsive and helpful. They scheduled calls to understand and address our problems. Email support is good as well.

Incentivized

We have significantly enhanced our ability to patch desktops, including laptops, desktop, cloud, virtual machines and other mobile devices used by end-users. BigFix's endpoint management functionality allows us to seamlessly patch a wide range of operating systems, such as Windows, MacOS, ChromeOS, and Linux systems, ensuring comprehensive patch management across IT infrastructures. We have established a track record of delivering secure and hassle-free patching solutions to our clients

We find that Nessus is a great product, on par if not slightly better compared to Qualys in terms of their pricing model. However, Qualys Cloud Platform has better quality reporting, and offers great tips and suggestions on quickly closing a gap and eliminating the risk. In our organization, both products are great and meet our expectations, but due to pricing, we favor Nessus slightly more.

Incentivized

• Overall, the product helps achieve the security posture mandated by HIPAA for our organization.
• It is a decent inventory management solution, and provides IT leaders with useful information for decision making.

Incentivized

• The most important thing that happens with this program is to automate one hundred percent the security of my system since this program is in charge of supervising each of the applications and websites in detail.
• One of the purposes for which we trust Qualys Cloud Platform is to keep our system clean and secure; the ability of this software to manage our vulnerability makes us more cautious about working with it.

Incentivized