No more typing reviews! Try our Samantha, our new voice AI agent.

BigFix vs Qualys TruRisk Eliminate comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 5, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
4.1
BigFix quickly delivers ROI in security compliance, streamlines patch management, reduces errors, and cuts costs with efficiency.
Sentiment score
5.9
Qualys TruRisk Eliminate boosts ROI by reducing security costs, enhancing patch efficiency, and significantly lowering vulnerabilities through automation.
With Qualys, we can save around 70 percent of time and between 30 to 40 percent of money.
Information Security Manager at BARC India
We have a 50 percent return on investment due to reduced operational complexity and increased efficiency in patching and detection.
Information Security - Manager at Infosys
In the past, it took us seven to ten days to close critical patches, but now we manage to address them within forty-eight hours, while high-priority SLAs can often be resolved within seven days.
IS Service Technical Specialist For Qualys Patch Management at ABB
 

Customer Service

Sentiment score
7.5
BigFix support is knowledgeable but varies; improved under HCL with valued community resources and direct engineer access.
Sentiment score
6.9
Qualys TruRisk Eliminate support is praised for responsiveness but needs improvements in communication and urgent issue resolution.
On a scale from one to ten, with ten being the highest quality, enterprise support provides timely responses, typically within four to eight hours.
Technical Director at SYSTEX
Technical support from HCL is satisfactory unless there are customization requirements.
Founder Director at Techsa Services
Whenever we need any kind of support, the BigFix team is present and available.
Solution Sales Specialist at TD SYNNEX
The support team is experienced and responsive.
Senior Security Consultant at CyberNxt Solutions LLP
The support team is responsive and provides detailed information.
Vulnerability Management Engineer at a comms service provider with 10,001+ employees
Whenever we raise a request and mention the priority of the ticket, they respond immediately via email or call.
Security Consultant at Onity
 

Scalability Issues

Sentiment score
5.5
BigFix efficiently manages large-scale endpoints with minimal issues, praised for scalability, flexibility, and ease of setup.
Sentiment score
7.5
Qualys TruRisk Eliminate scales efficiently, offering centralized cloud-based management across various environments, though Mac patch support needs improvement.
It supports approximately two to three hundred thousand endpoints, demonstrating significant scalability capabilities.
Administrator at a tech vendor with 10,001+ employees
BigFix requires some minimum configuration requirements.
RPA Developer at Hexaware Technologies Limited
Qualys Patch Management is a globally scalable product, easily handling increasing workloads and users.
Information Security Manager at BARC India
If a client has purchased licensing for ten thousand assets and exceeds that, Qualys continues to scan those additional assets, which ensures the client's coverage.
Lead Product Manager ASM at a tech vendor with 1,001-5,000 employees
The Qualys Cloud Agent handles the workload perfectly, even when deploying patches to thousands of assets simultaneously across different locations.
Senior Vulnerability Management Specialist | CTEM | Cyber Risk Strategist (FAIR™) at Overtech Security
 

Stability Issues

Sentiment score
6.9
BigFix is highly reliable and stable, effectively handling tasks with minimal issues, praised for its robustness in endpoint management.
Sentiment score
7.7
Qualys TruRisk Eliminate is stable and reliable, effectively managing vulnerabilities despite occasional minor glitches and update delays.
Overall, it is reliable.
System Engineer at a tech services company with 11-50 employees
It is highly stable.
Sr Security Engineer at a tech services company with 10,001+ employees
Regarding stability, I rate it a perfect ten out of ten for uptime, as I never experience lag, latency, or loading time.
Cyber Security Specialist at a financial services firm with 10,001+ employees
 

Room For Improvement

BigFix requires improvements in speed, ease of use, automation, integration, pricing, and network efficiency for optimal user satisfaction.
Enhancing UI, automation, and integrations, including dashboards and ITSM tools, would streamline workflows and reduce false positives.
Building a management console is quick and simple, taking only one to two hours for setup.
Technical Director at SYSTEX
The problem was related to the hardware configuration and hardware specifications.
RPA Developer at Hexaware Technologies Limited
In addition to reporting improvements, there should be a feature for application control to allow or disallow certain applications from being executed on endpoints.
Founder Director at Techsa Services
There is a limitation where Qualys may not always offer solutions for remediation, particularly for end-of-life or end-of-service applications.
System Engineer at a tech services company with 11-50 employees
It would be better if Qualys Patch Management identifies whether the process has failed at the first instance and provides a retry button or retry mechanism, allowing retries for failed patches.
Sr Security Engineer at a tech services company with 10,001+ employees
For critical options, they could make them red, green for medium, and blue for less significant options.
Cyber Security Specialist at a financial services firm with 10,001+ employees
 

Setup Cost

BigFix costs $30-$80 per endpoint annually, with prices varying by modules and additional database licenses.
Qualys TruRisk's pricing is considered reasonable with robust features, though some perceive it as costly compared to alternatives.
The pricing is pretty good and now follows a subscription model similar to SolarWinds, making it easier for customers to subscribe and unsubscribe.
Founder Director at Techsa Services
I rate the price for BigFix as medium, neither low nor high.
Administrator at a tech vendor with 10,001+ employees
We get many more features at the same price as other solutions such as Microsoft SCCM.
Senior Security Consultant at CyberNxt Solutions LLP
However, it can be a bit expensive sometimes, and I think clients can be shocked when they see the price.
Lead Product Manager ASM at a tech vendor with 1,001-5,000 employees
Qualys Patch Management is expensive.
Senior Information Security Engineer at a consultancy with 10,001+ employees
 

Valuable Features

BigFix offers robust patch management, compliance, and integration with scanners, excelling in scalability, customizability, and multi-platform support.
Qualys TruRisk Eliminate provides automated remediation, risk prioritization, and integration, enhancing vulnerability management and improving asset security efficiently.
Patching is the most preferable feature that users choose BigFix for, making it a very important component.
Administrator at a tech vendor with 10,001+ employees
The BigFix features that have proven most effective include inventory, software delivery, software distribution, software catalog, and both software and hardware management.
Technical Director at SYSTEX
I use this mainly to capture inventory for IBM products, and as BigFix was part of IBM, it gets easily integrated with IBM solutions.
RPA Developer at Hexaware Technologies Limited
We have been able to apply workarounds for zero-day vulnerabilities efficiently.
Senior Security Consultant at CyberNxt Solutions LLP
It provides insight into the organization's security posture and keeps databases updated with new CVEs.
Security Specialist at a photography company with 11-50 employees
Qualys has been instrumental in our vulnerability remediation efforts, enabling us to address nearly 25 million vulnerabilities.
Manager Information Security at a consultancy with 10,001+ employees
 

Categories and Ranking

BigFix
Ranking in Patch Management
7th
Average Rating
8.6
Reviews Sentiment
6.4
Number of Reviews
100
Ranking in other categories
Configuration Management (9th), Endpoint Protection Platform (EPP) (21st), Unified Endpoint Management (UEM) (10th), Autonomous Endpoint Management (7th)
Qualys TruRisk Eliminate
Ranking in Patch Management
1st
Average Rating
8.8
Reviews Sentiment
6.9
Number of Reviews
60
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Patch Management category, the mindshare of BigFix is 4.6%, down from 5.9% compared to the previous year. The mindshare of Qualys TruRisk Eliminate is 3.0%, down from 4.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Patch Management Mindshare Distribution
ProductMindshare (%)
Qualys TruRisk Eliminate3.0%
BigFix4.6%
Other92.4%
Patch Management
 

Featured Reviews

InderjeetSingh4 - PeerSpot reviewer
Administrator at a tech vendor with 10,001+ employees
End-to-end automation has simplified patching and software deployment across thousands of servers
There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initiated through the patch policy, it appears on the console but arrives in chunks. When targeting hundreds of servers from the patch policy, the actions come in chunks such as ten out of six, ten out of nine, or ten out of fifteen. This fragmented approach creates a significant challenge for the patching team to monitor the action status. I would recommend that the development team provide a single action or one to two actions instead of multiple actions requiring individual monitoring. A broad status update could be provided to the client indicating the overall progress of the patch policy implementation rather than requiring monitoring of every individual action. This would reduce the bandwidth required by the team to track multiple actions on the console.
PB
Vulnerability Management Engineer at a media company with 1,001-5,000 employees
Automated risk-based patching has reduced remediation time and meets SLAs across our hybrid estate
The best features Qualys TruRisk Eliminate offers include prioritizing the assets and automatically eliminating vulnerabilities without reaching out to the concerned team for timely and effective remediations. By using Qualys TruRisk Eliminate, we can remediate vulnerabilities on time. The biggest practical benefit of automating those remediations without involving the security team each time is that we can create security patches and automatically trigger them to all targeted devices. Qualys TruRisk Eliminate provides multiple models such as PM, cloud agent, cloud security, and total cloud. I am currently using multiple models, and everything helps me secure the devices. Regarding Qualys TruRisk Eliminate's AI capabilities, from the governance perspective, we can achieve vulnerabilities within a particular time frame. Its accuracy gives accurate results, and we can complete the activities as mentioned within the SLA. Basically, Qualys TruRisk Eliminate prioritizes vulnerabilities based on asset criticality, CVSS score, EPSS score, and the number of vulnerabilities. Combining these factors generates Qualys TruRisk values and helps prioritize vulnerabilities. It automatically fixes the vulnerabilities if any Qualys TruRisk value matches the conditions or rules. I use the solution's risk reduction recommendation report, which I assess for streamlining remediation. This helps identify vulnerabilities and fix them based on conditions such as asset criticality ranging from zero to five, the number of vulnerabilities, actively exploited vulnerabilities, and the Qualys Detection Score. Combining all these factors makes it achievable. I use Patch Management with Qualys VMDR. The integration is crucial because it automatically includes the relevant patches and configuration changes required to remediate vulnerabilities detected by VMDR without needing additional support from server owners. It patches the vulnerabilities via the agent. Qualys Patch Management's integration with Qualys TruRisk Eliminate influences the prioritization of patches for known exploited vulnerabilities or CISA catalog items by identifying and prioritizing vulnerabilities based on the Qualys TruRisk score, which incorporates multiple sources such as asset criticality, QDS, and the number of vulnerabilities. When evaluating and managing the potential operational impact of patch deployments or remediation actions for maintaining system uptime or application availability, I find that Patch Management does not require downtime on targeted devices and allows us to fix vulnerabilities during non-business hours.
report
Use our free recommendation engine to learn which Patch Management solutions are best for your needs.
921,714 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Manufacturing Company
10%
Outsourcing Company
10%
Comms Service Provider
6%
Outsourcing Company
10%
Financial Services Firm
9%
Government
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise12
Large Enterprise68
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise7
Large Enterprise38
 

Questions from the Community

What is your experience regarding pricing and costs for BigFix?
I rate the price for BigFix as medium, neither low nor high.
What needs improvement with BigFix?
There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initiated through the patch policy, it appears on the console but arrives in chunks. W...
What is your primary use case for BigFix?
My current use case involves being one of the products and one of the clients implementing this tool.
What is your experience regarding pricing and costs for Qualys Patch Management?
The pricing and licensing for Qualys TruRisk Eliminate were reasonable for the capabilities provided. The setup was straightforward, although the licensing structure could be a little simpler and m...
What needs improvement with Qualys Patch Management?
Qualys TruRisk Eliminate is strong overall, but the user interface and reporting could be made more intuitive. More customization in dashboards and easier integration with other security tools woul...
What is your primary use case for Qualys Patch Management?
My main use case for Qualys TruRisk Eliminate is to identify and prioritize critical security risks across our IT environment. Day-to-day, I use it to assess vulnerabilities, understand the risk le...
 

Also Known As

Tivoli Endpoint Manager
No data available
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
Information Not Available
Find out what your peers are saying about BigFix vs. Qualys TruRisk Eliminate and other solutions. Updated: September 2026.
921,714 professionals have used our research since 2012.