March 9, 2017 By Security Intelligence Staff 2 min read

Nothing is worse than having visibility with no credibility. Yet that’s the story with a few new startups who claim to do what IBM BigFix has been doing for over 20 years.

Over time, IBM BigFix has provided clients of all size with best-in-class, multiplatform solutions for enterprisewide asset discovery, patch management, software distribution, usage analysis, configuration management, security/regulatory compliance and more. Thousands of clients and over 100 million endpoints later, our clients still say the same thing about BigFix: “It just works.”

Therefore, it comes as no surprise that, when the U.S. Department of Interior recently reported that they’d discovered over 20,000 vulnerabilities — some dating back to 2009 — along with nearly 4,000 required patches, its response was to install BigFix immediately. To date, over 55 federal agencies have standardized on BigFix across over 4 million PCs, laptops and servers.

Since acquiring BigFix in 2010, IBM Security has continually enhanced the solution, most recently in the areas of querying endpoints in seconds, best-in-class EDR and integration with IBM Security’s Immune System and Watson.

IBM BigFix as an Industry Standard

Throughout the years, we’ve seen point competitors come and go: Newer startups that oversell themselves to be “the next big thing,” but lack BigFix’s hundreds of thousands out-of-the-box controls and checklists (which took decades to build). Smaller, VC-funded startups with a nice GUI that lack the automation that uniquely helps clients reduce time to value. Companies whose aggressive sales techniques convince clients to buy once, but whose tools are rarely deployed enterprisewide, let alone expanded.

In a world where enterprise software adoption rates are woefully low, BigFix remains committed to making our clients wildly successful. It’s the reason why clients who assume that they’re 90 percent compliant learn otherwise after deploying BigFix and subsequently increase compliance to nearly 100 percent — in just hours. It’s the reason why clients pass security and regulatory audits at the lowest cost possible. It’s the reason why clients consistently reduce cycles and costs, with payback in months.

Now, with BigFix Detect, our new EDR module, clients can consolidate best-in-class EDR, asset discovery, query, patch management and software distribution into a single pane of glass, infrastructure and skill set to compress cycles and costs like never before.

So, if you’ve found yourself in a situation where the slick endpoint tool you purchased only runs on PowerPoint, call your IBM representative today to discuss an exact BigFix solution for your needs. We remain committed to your immediate and long-term success.

Transforming endpoint security: Going far beyond attack detection

More from

What we can learn from the best collegiate cyber defenders

3 min read - This year marked the 19th season of the National Collegiate Cyber Defense Competition (NCCDC). For those unfamiliar, CCDC is a competition that puts student teams in charge of managing IT for a fictitious company as the network is undergoing a fundamental transformation. This year the challenge involved a common scenario: a merger. Ten finalist teams were tasked with managing IT infrastructure during this migrational period and, as an added bonus, the networks were simultaneously attacked by a group of red…

A spotlight on Akira ransomware from X-Force Incident Response and Threat Intelligence

7 min read - This article was made possible thanks to contributions from Aaron Gdanski.IBM X-Force Incident Response and Threat Intelligence teams have investigated several Akira ransomware attacks since this threat actor group emerged in March 2023. This blog will share X-Force’s unique perspective on Akira gained while observing the threat actors behind this ransomware, including commands used to deploy the ransomware, active exploitation of CVE-2023-20269 and analysis of the ransomware binary.The Akira ransomware group has gained notoriety in the current cybersecurity landscape, underscored…

New proposed federal data privacy law suggests big changes

3 min read - After years of work and unsuccessful attempts at legislation, a draft of a federal data privacy law was recently released. The United States House Committee on Energy and Commerce released the American Privacy Rights Act on April 7, 2024. Several issues stood in the way of passing legislation in the past, such as whether states could issue tougher rules and if individuals could sue companies for privacy violations. With the American Privacy Rights Act of 2024, the U.S. government established…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today