Platform & discovery
Know the endpoints you manage.
- Discover devices and inspect endpoint properties.
- Use Relevance, Fixlets and baselines to target actions.
- Track actions through consoles, WebUI and reports.
Home /
ENDPOINT MANAGEMENT
HCL BigFix
Connect endpoint discovery, patching, configuration and inventory in one management strategy.
01 / CAPABILITIES
What BigFix brings to your environment
Explore the modules that connect endpoint operations, security and employee experience.
Patch & Remediate
Move from missing updates to verified action.
- Deploy OS and third-party application updates.
- Automate patch work across supported Windows, macOS, Linux and UNIX endpoints.
- Connect patch deployment to ServiceNow change approvals.
CyberFOCUS & vulnerability remediation
Turn security findings into remediation priorities.
- Correlate findings from Tenable, Qualys or Rapid7 with fixes.
- Use exposure and threat context to prioritize work.
- Report progress and remaining security exposure.
Compliance
Keep endpoint settings aligned with policy.
- Assess configurations against supported CIS and DISA STIG checklists.
- Detect configuration drift and automate corrective actions.
- Retain historical reporting for audit preparation.
Inventory & software assets
Understand installations, usage and license demand.
- Discover hardware and installed software using catalogs and signatures.
- Analyze software usage and compare deployments with entitlements.
- Support license reviews, procurement and audit evidence.
Software distribution & self-service
Deliver applications through repeatable workflows.
- Package and deploy applications from a central console.
- Verify installation results and apply deployment policies.
- Offer approved software through the Self Service Application.
OS deployment & provisioning
Standardize workstations and servers.
- Deploy approved operating system images.
- Coordinate provisioning and reimaging from one place.
- Apply consistent setup across supported devices.
Remote control & power management
Support devices and manage energy policies.
- Troubleshoot supported endpoints through remote sessions.
- Control and monitor power conservation settings.
- Coordinate support and maintenance with endpoint operations.
Application Control
Define which applications may run.
- Manage execution policies on supported Windows devices.
- Application Control 2.0 uses Windows Defender Application Control (WDAC).
- Use audit mode before enforcing allow-list policies.
Server automation & virtual endpoints
Coordinate work across infrastructure.
- Sequence multi-step actions across multiple endpoints.
- Use Virtual Endpoint Manager for hybrid virtual and physical estates.
- Apply configuration and remediation policies consistently.
Modern Client Management & Mobile
Extend management to desktop and mobile devices.
- Enroll supported Windows and macOS clients, plus iOS, iPadOS and Android devices.
- Distribute apps, configuration profiles, certificates, Wi-Fi and VPN settings.
- Monitor device health and provide supported remote assistance.
Digital Employee Experience (DEX)
See how endpoint health affects daily work.
- Monitor device performance and application reliability.
- Identify experience issues and prioritize support.
- Connect experience insights with endpoint management workflows.
Capabilities vary by product entitlement, operating system and version. We map the required functions to your actual environment before recommending a package.
02 / EDITIONS & OFFERINGS
Choose the scope that fits.
BigFix offers workspace and infrastructure suites, a SaaS remediation service, and individual products.
Employee devices
BigFix Workspace
Lifecycle, remediation, compliance, inventory, mobile management and DEX in a workspace-focused suite.
Employee experience & AI support
BigFix Workspace+
Extends Workspace with BigFix AEX for conversational support and automated resolution of common employee IT issues.
Servers & infrastructure
BigFix Enterprise
Combines Platform, Lifecycle, Remediate, Compliance and Inventory for infrastructure operations.
Infrastructure & runbook automation
BigFix Enterprise+
Adds Runbook AI to Enterprise, connecting operational workflows with automated incident resolution.
Cloud-delivered remediation
BigFix SaaS Remediate
A SaaS service combining patching, risk prioritization, remediation guidance and outcome tracking without a customer-operated BigFix management server.
A focused starting point
Individual products
Discuss Remediate, Lifecycle, Compliance or Inventory for a specific need, then plan the appropriate expansion path.
Workspace+ is licensed by managed client device; Enterprise+ uses managed virtual server (MVS) licensing. Final scope, add-ons, availability and commercial terms must be confirmed in the selected HCL offer.
03 / DEPLOYMENT
Match the operating model to your team.
Choose how the management service is operated, then confirm endpoint coverage and network requirements.
Self-managed BigFix
Operate the BigFix platform within your organization’s infrastructure. Plan server, database and relay capacity, maintenance, connectivity and the modules your team needs.
HCL BigFix SaaS Remediate
Use HCL’s cloud-delivered remediation service. HCL operates the service infrastructure while your team defines endpoint scope, patch policies, priorities and remediation goals.
Physical, virtual, cloud-hosted and roaming endpoints can form one managed estate. Platform support and feature coverage differ by module; mobile management uses its own enrollment and management components.
04 / EXTENSIONS & CONNECTED PRODUCTS
Extend where your needs take you.
These portfolio components and content packs complement the core modules. Some are bundled; others require an additional entitlement.
BigFix AEX
AI-assisted employee support and automated resolution; included in Workspace+.
Runbook AI
Automates IT operations workflows and incident resolution; included in Enterprise+.
SaaS Management
Discover SaaS applications, review subscriptions and usage, and identify opportunities to reduce wasted spend.
Cloud Lifecycle Management
Extends the portfolio to management of cloud-hosted resources.
Service Management
Connects the wider portfolio with AI-enabled IT service delivery.
CISA KEV content
Adds content focused on known exploited vulnerabilities for remediation planning.
Windows & RHEL ESU
Extended-update content for eligible legacy systems, subject to vendor support and licensing requirements.
PCI DSS content
Additional security configuration checklists to support PCI DSS assessment and reporting.
Service Graph Connector
Connects BigFix Inventory information to ServiceNow CMDB workflows.
Official HCL references
Product information checked on 24 September 2026. Follow the vendor documentation for current platform support and entitlement details.
THE PSYCHOTECH DIFFERENCE
Technology, with people behind it.
Psychotech provides implementation, training and custom development around BigFix, including Relevance queries, REST integrations and deployment automation.
Start with a discussion of your environment, priorities and requirements.