BigFix vs OpenText Core Endpoint Protection comparison

Why PeerSpot?

HCLSoftware and OpenText are both solutions in the Endpoint Protection Platform (EPP) category. HCLSoftware is ranked #22 with an average rating of 8.5, while OpenText is ranked #32. HCLSoftware holds a 1.9% mindshare in EPP, compared to OpenText’s 1.8% mindshare. Additionally, 97% of HCLSoftware users are willing to recommend the solution, compared to 89% of OpenText users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Mar 29, 2026

BigFix and OpenText Core Endpoint Protection compete in the endpoint management and security category. BigFix seems to have the upper hand with its extensive customization and integration features, which offer a wider range of compliance standards and seamless integration into development processes.

Features: BigFix offers extensive support for multiple operating systems and third-party applications, real-time vulnerability remediation, and a high degree of customization. OpenText Core Endpoint Protection focuses on lightweight protection with AI capabilities, cloud-based management, and a low overhead on devices.

Room for Improvement: BigFix requires enhancements in automation and integration with third-party applications, improvements in the web UI, and faster console operations. OpenText Core Endpoint Protection could improve detection capabilities, provide more comprehensive reporting features, and advance ransomware protection.

Ease of Deployment and Customer Service: BigFix is primarily on-premises, appealing to large-scale in-house environments but facing challenges in scalability. Its customer support is mixed. OpenText Core Endpoint Protection supports flexible deployments, including public, private, and hybrid clouds, offering easier scalability. Customer service is satisfactory but lacks detailed feedback compared to BigFix.

Pricing and ROI: BigFix is moderately priced with flexible licensing models, but costs can increase with deployment scale. It offers significant ROI due to its comprehensive features. OpenText Core Endpoint Protection is seen as more cost-effective with a straightforward pricing structure.

To learn more, read our detailed BigFix vs. OpenText Core Endpoint Protection Report (Updated: September 2026).

Buyer's Guide

BigFix vs. OpenText Core Endpoint Protection

September 2026

Download the complete report

Helped 917,433 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of October 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.7% compared to the previous year. The mindshare of BigFix is 1.9%, up from 1.2% compared to the previous year. The mindshare of OpenText Core Endpoint Protection is 1.8%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.8%
BigFix	1.9%
OpenText Core Endpoint Protection	1.8%
Other	92.5%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

InderjeetSingh4

Administrator at a tech vendor with 10,001+ employees

End-to-end automation has simplified patching and software deployment across thousands of servers

There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initiated through the patch policy, it appears on the console but arrives in chunks. When targeting hundreds of servers from the patch policy, the actions come in chunks such as ten out of six, ten out of nine, or ten out of fifteen. This fragmented approach creates a significant challenge for the patching team to monitor the action status. I would recommend that the development team provide a single action or one to two actions instead of multiple actions requiring individual monitoring. A broad status update could be provided to the client indicating the overall progress of the patch policy implementation rather than requiring monitoring of every individual action. This would reduce the bandwidth required by the team to track multiple actions on the console.

Read full review

reviewer2584380

vCIO At Grove Networks Inc. at a computer software company with 11-50 employees

Improving threat detection is critical for enhanced protection

We use Webroot Business Endpoint Protection as a NextGen antivirus solution for our clients. It's included in the contract we have with our clients as a cost-effective option for antivirus protection Webroot Business Endpoint Protection is cost-effective for rolling it out to all of our clients,…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I generally believe that Cortex XDR by Palo Alto Networks is probably the best in the market right now."

"Stability-wise, it is good; I did not hear about any issues in terms of stability, and Cortex XDR by Palo Alto Networks can be trusted completely."

"The tool is designed to scale for large enterprises and handle large volumes of data."

"Has great threat detection capabilities."

"The positive impacts I see from Cortex XDR by Palo Alto Networks include a complete 360-degree view of our security posture altogether, being a uniform platform where we are ingesting logs from multiple resources."

"The one feature of Palo Alto Networks Traps that our organization finds most valuable is the App ID service."

"I can highlight that we have not faced any security incidents with Cortex XDR by Palo Alto Networks, and even though our environment is quite dynamic, we have not faced any security incident with Cortex XDR by Palo Alto Networks until now."

"There are a lot of lead solutions in this space, however, Palo Alto is number one."

More Cortex XDR by Palo Alto Networks pros

"Before we had BigFix, we had problems with some malware. BigFix allows us to immediately patch all instances of endpoints that were vulnerable to antivirus and initiate scans. That's key."

"It is a highly effective tool if you're cross-platform."

"If you utilize the tool to the maximum capacity available to you, your ROI is significantly five to seven-fold over cost."

"It's great if you're looking for an all-in-one inventory management, patch management and security tool."

"My company provides support services to a lot of customers and companies. We have reduced a huge amount of man-effort. Along with the man-effort, we have reduced the timeline to fix the compliance and security gaps. We have an unbroken record. The documentation clearly says that we have done the patching of newly released patches, including Microsoft and third-party patches, in up to 80% of the computers, within 72 hours of the release of the production. That was a very massive benefit that we have seen. When I talk about the 80% endpoints, it is 100 or 200. I am talking about 25,000 endpoints."

"From a security standpoint, it allows us to make sure that we're not leaving ourselves vulnerable to exploits and things like that. That's the biggest advantage that we see to the product from a security standpoint."

"It has one central location to manage all the different platforms that we have such as desktop, Windows Servers, Linux Server, Solaris, AIX and zLinux, and it's great to be able to manage them all from one central location."

"This has very much improved our organization by saving time to deploy thousands of endpoints to our customers."

More BigFix pros

"Probably, compared to other antivirus programs, what we like about it is it is lightweight."

"The solution has many features. It is very easy to define and set the policies based on the user groups, it does not take up a lot of resources in operation, and has provided us with a good track record of protection."

"The main reason we had Webroot is that it was cost-effective for our clients."

"Webroot pioneered integration of novel concepts in endpoint protection."

"I like that Webroot is very lightweight. It didn't bog down the machine, and more importantly, it had heuristics artificial intelligence to some degree. It wasn't like full-blown artificial intelligence, but something where you have one endpoint recognizing issues because it maintains a cloud database. If one client recognizes a threat, it would add it to the database, and almost immediately, every agent in the world would also know about that threat. That was very appealing to us. However, now it's becoming commonplace, whereas ventures like Symantec and McAfee were based more on the traditional model of definition and updates, and we were always falling behind. Webroot also has pretty good technical support."

"It monitors traffic and keeps us from getting ransomware or other viruses."

"It is excellent endpoint protection for mobiles that does everything it says it will."

"Overall, the solution is stable."

More OpenText Core Endpoint Protection pros

Cons

"However, if you do not have Palo Alto in your environment, you are paying these additional services just for Cortex XDR by Palo Alto Networks, so it is not a cost-effective solution."

"There are some default policies which sometimes affect our applications and cause them to run around. In the hotel industry, we use a different type of data versus Oracle and SQL. By default, there are some policies which stop us from running properly. Because of this, the support level is also not that strong. We have to wait to get a results."

"I am facing issues with customer support for Cortex XDR by Palo Alto Networks, so I am not satisfied with customer support."

"I would rate it an 8 rather than a 10 mainly because there is still room to improve the user experience around complex investigations, including alert tuning and third-party integration."

"The downside to the solution is that there are a large number of false positives."

"We would also like to have advanced tech protection and email scanning."

"Cortex XDR by Palo Alto Networks is not only pricey; it is extremely expensive."

"If they had pulse rate detection, it would be better."

More Cortex XDR by Palo Alto Networks cons

"We would like to see more of the extended reporting feature."

"I'd definitely like to see additional feature parody in the web UI versus the console. There are certain things that you can only do in the console and they're very cumbersome to do, like secure parameters, for example. That's definitely something that has a wide degree of utility but it needs to be easier to surface. At this particular juncture between the transition, between the legacy console and the web UI, it's hard to justify dealing with the cumbersome aspects of the legacy console when theoretically everything's been through the web UI."

"There is one feature in BigFix called the automation patch policy that requires enhancement."

"Around the scalability concern, I would like to see the ability to run teamed, clustered, or hierarchical root servers, in order to provide a more robust, high availability system. The single monolithic root server model does somewhat bother me."

"The new EDR (Endpoint Detection and Response) feature, Detect, is new and still needs a few updates."

"I would like to see API connectivity, built-in API connectors to the standard toolsets, whether it's for your ServiceNow or your Qualys. More API connectivity to make it easier to integrate to other tools."

"The product should become cloud-based. Also, the peer nesting ability of the product is a little backward."

"I would like to see more custom content."

More BigFix cons

"Since they're dealing with multi-core environments now, the best option would be for them to enhance the product so that the product can automatically do an assessment on the machine."

"The only complaint I have with Webroot is its inability to prevent UoD phishing and its inability to check against bots or block anti-attacks. Plus the URL server is in zero-definition."

"An updated UI would be nice, but is not hardly used."

"The solution could improve by providing better ransomware protection."

"We were attacked by CryptoLock. It didn't protect us in the way we needed to and an attack was able to get through their defenses."

"There should be a Webroot Business Endpoint Protection mobile app."

"Its detection capability for certain attacks should be improved. It should have better and wider detection for certain malware attacks. It could also have some sort of RMN."

"The console spins up relatively slowly, and some of the configuration items are obscure (e.g., reporting back one time per day is a default setting) and need to be tweaked."

More OpenText Core Endpoint Protection cons

Pricing and Cost Advice

"Cortex XDR by Palo Alto Networks is an expensive solution."

"I don't like that they have different types of licenses."

"The pricing is a little bit on the expensive side."

"Cortex XDR by Palo Alto Networks is quite an expensive solution."

"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."

"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."

"The pricing is a little high. It is per user per year."

"It is "expensive" and flexible."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"The tool's price continues to go up. The cost per endpoint can vary, ranging from approximately 30 to 80 dollars per year. Compared to other products, pricing is in the middle. You need to buy an additional database license, but most users already have it."

"So, the pricing is slightly more expensive than the others. I have to keep buying licenses every time I add a new device."

"I would stay with the Managed Virtual Server license model, which is a 1-to-1 license per OS whether it is virtual or physical."

"The product is less costly when compared to other solutions, and this is a good solid solution for what we have paid."

"The price is reasonable, but our customers find it expensive."

"It might be about $23 a client."

"Compliance, inventory, and licensing are really pricey. They should lower the price. It discourages users from getting onboard."

"You are charged per server and per workstation when using BigFix. ManageEngine is a lot cheaper than BigFix. There are some additional costs, such as support."

More BigFix pricing and cost advice

"I think the price is fairly reasonable. I was really prepared to pay more, but the price is fine."

"The pricing is high."

"Webroot Business Endpoint Protection is not too expensive. My licenses cost me between $300 and $400. It is really good price wise."

"The solution doesn't cost too much. It's about 30 Euros a year for each endpoint. It's pretty affordable for us and for many other companies."

"From a pricing standpoint, I would rate it a four out of five."

"The solution is pretty cheap, actually. At our level, which is at 2,500 endpoints, we're paying 87 cents an agent per month."

"I rate the product's pricing a three on a scale of one to ten, where one is cheap, and ten is expensive. There are no costs in addition to the product's standard licensing fees."

"Our strategy was to overestimate the complexity and cost. It turned out that Webroot's assurance was justified."

More OpenText Core Endpoint Protection pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

917,433 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

13%

Outsourcing Company

12%

Construction Company

10%

Manufacturing Company

10%

Financial Services Firm

13%

Manufacturing Company

Outsourcing Company

Construction Company

11%

Outsourcing Company

10%

Comms Service Provider

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	48
Midsize Enterprise	21
Large Enterprise	56

By reviewers
Company Size	Count
Small Business	30
Midsize Enterprise	12
Large Enterprise	68

By reviewers
Company Size	Count
Small Business	35
Midsize Enterprise	2
Large Enterprise	2

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for BigFix?

I rate the price for BigFix as medium, neither low nor high.

See all answers

What needs improvement with BigFix?

There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initia...

See all answers

What is your primary use case for BigFix?

My current use case involves being one of the products and one of the clients implementing this tool.

See all answers

What is your experience regarding pricing and costs for Webroot Business Endpoint Protection?

Webroot Business Endpoint Protection is probably on the cheaper side, so I would rate their pricing a one or a two ou...

See all answers

What needs improvement with Webroot Business Endpoint Protection?

Webroot Business Endpoint Protection needs to improve its ability to detect threats. It does not do what it's adverti...

See all answers

What is your primary use case for Webroot Business Endpoint Protection?

We use Webroot Business Endpoint Protection as a NextGen antivirus solution for our clients. It's included in the con...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 15% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Red Hat Ansible Automation Platform vs BigFix

Compared 5% of the time

Tanium vs BigFix

Compared 5% of the time

Microsoft Configuration Manager vs BigFix

Compared 4% of the time

HashiCorp Terraform vs BigFix

Compared 3% of the time

Check Point Harmony Endpoint vs BigFix

Compared 2% of the time

More BigFix Competitors

Microsoft Defender for Endpoint vs OpenText Core Endpoint Protection

Compared 47% of the time

Symantec Endpoint Security vs OpenText Core Endpoint Protection

Compared 4% of the time

SentinelOne Singularity Endpoint vs OpenText Core Endpoint Protection

Compared 4% of the time

Huntress Managed EDR vs OpenText Core Endpoint Protection

Compared 3% of the time

HP Wolf Security vs OpenText Core Endpoint Protection

Compared 1% of the time

More OpenText Core Endpoint Protection Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

October 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

BigFix

October 2026

Download BigFix product report

Buyer's Guide

OpenText Core Endpoint Protection

October 2026

OpenText Core Endpoint Protection report

Download OpenText Core Endpoint Protection product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Tivoli Endpoint Manager

Webroot SecureAnywhere Business Endpoint Protection

Interactive Demo

Demo not available

Palo Alto Networks

HCLSoftware

Demo not available

OpenText

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

OVERVIEW:

HCL BigFix is a Unified Endpoint Management (UEM) and automation platform that delivers secure, resilient operations by reducing risk, cost, and operational complexity across on-premises, hybrid, and multi-cloud environments through a centralized control plane.

Built on a single-agent, multi-platform architecture, HCL BigFix unifies infrastructure security, endpoint management, remediation, and digital employee experience automation within a single platform, enabling IT Operations and Security teams to manage more than 165 million endpoints. As AI-driven vulnerability discovery accelerates through frontier models such as Mythos, HCL BigFix helps organizations reduce exposure with near real-time remediation, automated compliance enforcement, and continuous risk reduction. It integrates with leading vulnerability management solutions, including Tenable, Qualys, and Rapid7, and leverages 600,000+ out-of-the-box remediation Fixlets, 50,000+ compliance checks, and a proven >99.5% first-pass patch success rate to help organizations close the gap between vulnerability detection and remediation.

What are BigFix's key features?

Automated Patch & Vulnerability Remediation: Automates patch deployment and vulnerability remediation across workstations, servers, virtual machines, and cloud workloads using 600,000+ out-of-the-box remediation Fixlets.

Compliance Enforcement: Supports continuous compliance through 50,000+ compliance checks, automated policy enforcement, and prebuilt remediation content.

Enterprise Scalability: Manages and secures more than 165 million endpoints across over 120 operating system variants.

Centralized Endpoint Management: Delivers unified visibility and control across distributed environments through a resilient single-agent architecture.

Digital Employee Experience: Powered by AEX, HCL BigFix's agentic AI platform, enabling proactive monitoring, self-healing workflows, intelligent automation, and natural-language interaction.

What are potential benefits and ROI factors?

Reduced Cyber Risk: Near real-time remediation shortens exposure windows as AI-driven vulnerability discovery compresses exploitation timelines.

Lower Operational Costs: Consolidates endpoint management, security, and automation into a single platform, reducing tool sprawl and administrative overhead.

Operational Resilience: Maintains continuous compliance and policy enforcement across distributed environments.

Improved IT Efficiency: Automates routine endpoint operations and vulnerability remediation, reducing manual effort and accelerating response times.

Higher End-User Productivity: Resolves endpoint issues proactively to minimize disruption and improve employee experience.

Organizations across government, financial services, telecommunications, healthcare, manufacturing, and other regulated industries use BigFix for endpoint management, patching, compliance, software distribution, and vulnerability remediation. Support for standards including SCAP 1.3 and NIAP makes BigFix well suited for highly regulated and public-sector environments.

HCLSoftware

OpenText Core Endpoint Protection offers cloud-managed endpoint security with AI integration, providing real-time protection and lightweight performance. It ensures low system impact, seamless cloud integration, and cost-effective security solutions for various devices.

OpenText Core Endpoint Protection is a comprehensive endpoint security platform utilized by managed-service providers for antivirus and firewall functionality across servers, workstations, and mobile devices. It employs AI for robust threat detection, integrating with cloud applications for real-time updates. Multi-layered security features include malware protection, network defense, and DNS protection. Although connectivity and threat reporting need improvement, this platform extensively supports remote device management and integrates efficiently with Active Directory policies.

What are the key features of OpenText Core Endpoint Protection?

Cloud Management: Centralized admin console for easy oversight
AI Integration: Enhanced threat detection capabilities
Lightweight Performance: Minimal impact on system resources
Real-time Threat Database: Constant updates for effective protection
Web Control Interface: Monitors and controls web traffic

What benefits are associated with OpenText Core Endpoint Protection?

Ease of Setup and Maintenance: Facilitates quick deployment and upkeep
Seamless Cloud Integration: Simplifies scalability and operation
Cost-Effectiveness: Affordable pricing with comprehensive features
Mobile Security Capabilities: Supports remote device management

OpenText Core Endpoint Protection finds application in industries requiring stringent data protection and peace of mind over device security. Managed-service providers implement this for comprehensive antivirus and firewall features, safeguarding multi-device networks. It is particularly useful for DNS protection and integrating with Active Directory policies, enabling secure yet flexible operations across sectors.

OpenText

Sample Customers

CBI Health Group, University Honda, VakifBank

US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation

Mytech Partners

Buyer's Guide

BigFix vs. OpenText Core Endpoint Protection

September 2026

Free Report: BigFix vs. OpenText Core Endpoint Protection

Find out what your peers are saying about BigFix vs. OpenText Core Endpoint Protection and other solutions. Updated: September 2026.

DOWNLOAD NOW

917,433 professionals have used our research since 2012.

See our BigFix vs. OpenText Core Endpoint Protection report.

See our list of best Endpoint Protection Platform (EPP) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.