HCL BigFix

HCL Software Patch Management (primary)Compare with others in Patch Management

Product

Endpoint management platform that discovers, patches and enforces configuration across operating systems and third-party software, on and off the corporate network. HCL BigFix is an AI endpoint management platform that uses machine learning and automation to discover, patch, and remediate endpoints with minimal manual effort. HCL BigFix SaaS Remediate is an HCL-managed, multi-tenant SaaS service purpose-built for mid-market teams that need rapid, cloud-native patching and vulnerability remediation. AI-enabled automation is a core HCL BigFix capability included out of the box, powered by our Fixlet engine. Supported platforms are Linux, macOS, Windows and Windows Server.

Current Version: 11.0.7
Product Page: hcl-software.com/bigfix
Market: EnterpriseMid-Market
Licence: Paid
Price: Quote
Record Created: 2026-10-04
Last Updated: 2026-10-14

Vendor

HCL Software is the software division of HCL Technologies, and publishes BigFix, the endpoint management and patching platform acquired from IBM in 2019. Vendor page →

Website: hcl-software.com
Country: India
Headquarters: Noida, India
Year Established: 2019
Customers: 20K organisations
Users: 165M devices protected
Revenue: $1.4B (2026)

Platforms

Linux	native
macOS	native
Windows	native
Windows Server	native

Target Market

Enterprise primaryMid-Market primary

Capabilities

Pricing

Plan	Licence	Priced per	Billed	Price
Workspace+	Price on request	per device	no recurring charge	Quote

Versions

11.0.7platform not recorded
11.0.4.60Windows
11.0.0.175macOS

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Common Criteria1 active1 expiredshow 2 certificates ▾

HCL BigFix Version 11.0.3activeissued 2025-05-27
HCL BigFix version 10.0.1.41EAL2expiredissued 2021-05-06

OESIS Framework SupportSupported1 activeSupported

Change History

This record was created 2026-10-04. Everything below is what has changed since.

2026-10-14Capability addedMulti-Tenant (MSP) Management: built inevidence
2026-10-12Capability addedAir-Gap Operation: limitedevidence
2026-10-10New versionNew version: 11.0.4.60 (Windows)evidence
2026-10-10New versionNew version: 11.0.0.175 (macOS)evidence
2026-10-10New versionNew version: 9.5.11.191 (Windows)evidence
2026-10-09New versionNew version: 11.0.7evidence
2026-10-06Certification addedCertified: OESIS Framework Support (Supported)evidence
2026-10-05Capability addedPatch Rollback: limitedevidence
2026-10-05Capability addedLocal Patch Repository: built inevidence
2026-10-05Capability addedCentral Management Console: built inevidence
2026-10-05Capability addedReboot Management: built inevidence
2026-10-05Capability addedPatch Compliance Reporting: built inevidence
2026-10-05Capability addedRoaming Endpoint Patching: built inevidence
2026-10-05Capability addedPhased / Ring Deployment: built inevidence
2026-10-05Capability addedAutomated Patch Deployment: built inevidence
2026-10-05Capability addedAir-Gap Operation: built inevidence
2026-10-04Platform addedRuns on Linuxevidence
2026-10-04Platform addedRuns on macOSevidence
2026-10-04Platform addedRuns on Windows Serverevidence
2026-10-04Platform addedRuns on Windowsevidence
2026-10-04Certification addedCertification expired: Common Criteria (EAL2)evidence
2026-10-04Pricing plan addedPrice: Workspace+ — price on requestevidence
2026-10-04Product updatedSold to: Enterpriseevidence
2026-10-04Product updatedSold to: Mid-Marketevidence
2026-10-04Capability addedSoftware Deployment: built inevidence
2026-10-04Capability addedVulnerability-Based Prioritisation: built inevidence
2026-10-04Capability addedOperating System Patching: built inevidence
2026-10-04Capability addedApplication Patching: built inevidence
2026-10-04Certification addedCertified: Common Criteriaevidence
2026-10-04Product createdNew product, listed in Patch Managementevidence

Something wrong? Suggest a correction →

Application Patchingkey	native
Operating System Patchingkey	native
Automated Patch Deploymentkey	native
Vulnerability-Based Prioritisationkey	native
Patch Rollbackkey	partial
Phased / Ring Deployment	native
Roaming Endpoint Patchingkey	native
Patch Compliance Reporting	native
Reboot Management	native
Software Deployment	native
Vulnerability Shielding	Not known
Central Management Console	native
Air-Gap Operationkey	partial
Local Patch Repository	native
Agentless Patchingkey	Not known
Multi-Tenant (MSP) Managementkey	native