Automox, HCLSoftware, Ivanti and Tanium

About HCLSoftware

HCLSoftware develops, markets, sells and supports solutions in four areas: digital transformation, data and analytics, AI and intelligent automation, and enterprise security. HCLSoftware is the software products and IP division of HCLTech, and B Kalyan Kumar serves as President of HCLSoftware. C Vijayakumar was entrusted with the role of CEO of HCL Technologies in October 2016. Robotiq.ai is now part of HCLSoftware.^[2][3][4]

HCLSoftware offers endpoint management, application security and workload automation to keep IT running. HCLSoftware unifies, governs and catalogs enterprise data for AI and analytics initiatives. HCLSoftware orchestrates marketing, commerce and collaboration experiences. HCLSoftware builds for customer experience, data, IT operations and engineering teams.^[4]

HCL BigFix helps IT and Security teams secure their endpoint fleet. HCLSoftware builds endpoint management for servers, laptops, mobile and frontline devices with one agent and one console. HCLSoftware offers unified endpoint management software that combines security, automation and digital employee experience in one platform. HCL BigFix provides visibility, control and remediation across air-gapped networks, critical infrastructure, remote users and hybrid cloud. HCL BigFix includes AI-enabled automation powered by its Fixlet engine. HCLSoftware lets customers manage, patch, provision, secure and retire endpoints across operating systems from a single platform.^[1][5][6]

Workspace+ and Enterprise+ are bundled offers designed around distinct endpoint and infrastructure-management needs. Workspace+ is licensed by the number of managed employee devices, such as desktops, laptops and mobile devices. Enterprise+ is licensed by the number of managed server devices and cloud instances. Modules such as Lifecycle, Compliance and Inventory can be purchased as standalone modules instead of the full Workspace+ or Enterprise+ bundle. HCL BigFix offers both bundled editions and separately selectable capabilities. HCL BigFix is offered through a subscription model that includes the software licence and Software Subscription and Support. HCL BigFix SaaS Remediate is an HCL-managed, multi-tenant SaaS service for mid-market teams that need patching and vulnerability remediation.^[6]

HCL AppScan is a platform that includes HCL AppScan on Cloud and HCL AppScan 360º. HCL AppScan has on-premises and cloud offerings that use SAST technology.^[7]

HCL BigFix v11 has achieved SCAP 1.3 validation under the NIST SCAP Validation Program. HCL BigFix v11 has achieved NIAP certification. The HCLSoftware Support organization has achieved ISO27001 certification. The HCL Product Security Incident Response Team manages the receipt, investigation and internal coordination of reported security vulnerabilities for HCLSoftware product offerings. BigFix content is cryptographically signed during the secure build process. HCLSoftware provides code to both commercial and government customers.^[5]

Exprivia uses HCL BigFix to simplify endpoint management, automate compliance and gain greater visibility across IT environments. National Bank of Canada secures a growing endpoint estate with HCL BigFix. Massachusetts keeps critical citizen services running with HCL BigFix. A Fortune 500 pharmaceutical company uses the HCL BigFix Enterprise+ offering. Ipsen secures its healthcare and life sciences applications with HCL AppScan.^[4][6]

HCLSoftware products can be deployed to any cloud, public, private or hybrid.^{[1][4][5][6][8]}

About Ivanti

Ivanti offers IT service management software that scales from core service and asset management to ITSM Premium capabilities, with optional autonomous endpoint management add-ons. Ivanti expands visibility with a single-pane view of gateways, devices, users and applications.^[1][5]

Ivanti ITSM is built on a multi-tenant platform designed for the cloud, and it can be deployed in the cloud, on-premises or as a hybrid combination. Ivanti ITSM is built on industry standards with 14 ITIL 4-certified practices. Embedded AI in the ITSM product auto-classifies tickets at intake and generates knowledge articles on resolution. AI capabilities require Ivanti ITSM 2024.2 or later on SaaS deployments. ITSM offers over 1,000 connectors that extend workflows into HR, finance, security and more. HR service management automates onboarding, offboarding, case management and employee self-service with a shared ITSM configuration database. GRC management tracks authority documents, citations, controls and risks in a single system.^[6]

Ivanti provides agentic AI-guided experiences and automation capabilities across HR, facilities, security and more with its ITSM Premium solution. Ivanti ITSM Premium includes everything in Ivanti ITSM, plus additional capabilities. Autonomous Endpoint Management connects through native integration with ITSM workflows.^[5]

Patch for Endpoint Manager adds patch management to an Endpoint Manager environment to evaluate, test and apply OS and app patches enterprise-wide, automatically. Patch for Endpoint Manager detects vulnerabilities in Windows, Mac OS, Linux and hundreds of third-party apps, and deploys pre-tested patches. It supports vulnerability detection and remediation for Windows, macOS and Linux, and scans and reports on AIX, CentOS and HP-UX vulnerabilities. Patching can interact with devices through Wake-On-WAN, device booting, do-not-disturb events and maintenance windows. Application Control combines dynamic allowed and denied lists with privilege management to prevent unauthorized code execution. Application Control is part of the Ivanti User Workspace Manager (UWM) suite.^[1][7][8]

Ivanti Risk-Based Vulnerability Management prioritizes the vulnerabilities and weaknesses that pose the most risk. Ivanti RBVM continuously correlates an organization's infrastructure with vulnerability data, threat intelligence, manual pen test and research-based findings, and business asset criticality to measure risk and prioritize remediation activities. Security analysts can deliver lists of prioritized vulnerabilities directly to Ivanti Patch Management for patching through an API integration. Ivanti's Vulnerability Risk Rating (VRR) scores consider threats, not just severity, and update based on real-world threat context. Threat intelligence on vulnerabilities, such as which are tied to ransomware, is sourced from Ivanti Vulnerability Knowledge Base.^[9][10]

Ivanti Application Security Posture Management (ASPM) is a cloud-based solution that assesses vulnerabilities in internal and customer-facing applications so that DevSecOps teams can prioritize the highest-risk vulnerabilities for remediation. Ivanti ASPM ingests data from over 100 sources and natively integrates with Ivanti ITSM and Ivanti Patch Management. Ivanti ASPM pricing is based on the number of assets an organization contains. Ivanti External Attack Surface Management (EASM) is a cloud-based application that uses agentless monitoring to uncover all internet-facing assets, including assets that evade detection by traditional discovery tools. Each vulnerability identified by Ivanti EASM is assigned a Vulnerability Risk Score (VRS).^[10][11]

Ivanti is headquartered in Utah and has nearly 3,000 employees in 25 countries. Offices include London and Paris, and a new custom-built headquarters in Utah. Ivanti has received ATOs from the Air Force, Army, Department of Defense, Defense Health Agency, Department of Homeland Security, National Guard and Navy. Ivanti offers a customized Success Plan, ROI measurement and Capability Assessment for the Ivanti product suite. Ivanti provides professional services for implementations, and on-demand learning is offered on the Advantage Learning platform.^{[1][6][13][14]}

About Tanium

Tanium sells Tanium Atlas, which finds, fixes, and verifies across every endpoint in seconds. Tanium says teams and AI agents act on the same real-time data, with guardrails and sign-off on every action. Tanium says Atlas lets users go from question to resolution in seconds by typing what they need answered or done in plain language.^[3][4][6]

Atlas manages endpoints, reduces exposure, and stops threats without switching tools or handing off work. Atlas plans and executes multi-step autonomous workflows, with every action governed and fully auditable. Tanium says background agents continuously monitor the environment and surface issues before users have to ask. Tanium describes visibility, patching, compliance, and threat response as all on one platform and all operated through Atlas. Tanium says teams can know every endpoint and keep every device patched and compliant with machine-speed deployment.^[1][3][5]

Tanium Asset gives IT operations and asset management teams real-time data about their IT assets, regardless of location. Tanium Asset feeds real-time data into common CMDBs, such as ServiceNow. Tanium says teams can know and maintain their IT asset and SBOM inventory in real-time. Tanium also says teams can understand the status of their devices within seconds and run configurable reports. Tanium says that when a software supply chain vulnerability is reported, teams are equipped with data to answer leadership and mitigate the risk. Tanium HuntIQ is designed to help security teams proactively hunt for sophisticated threats, optimize their security platform, and continuously improve their security posture.^{[5][9][15][16]}

Tanium has native connectors to ServiceNow, Microsoft, Splunk, and more. The Tanium Atlas MCP Server brings governed, real-time endpoint data into Claude, ChatGPT, and Copilot Studio. Tanium says the AI answers from live data and acts only within the user's guardrails. Tanium ITX for ServiceNow unifies IT Service Management, IT Asset Management, and IT Operations Management. Tanium Security Operations for ServiceNow unifies IT, security, and risk teams in ServiceNow. Tanium IRM for ServiceNow integrates real-time data and automation to enhance compliance management and streamline risk assessments. Tanium offers automated patching of endpoints associated with change records based on vulnerability and compliance risk. Tanium Ask allows teams to select self-service capabilities.^{[1][3][10][16][17][18]}

NEC launched its endpoint management program in 2002 and did not encounter Tanium until 2019. NEC chose Tanium Cloud and installed the agent on over 200,000 endpoints in just four months. For NEC, investigating endpoint applications for specific vulnerabilities used to take more than 24 hours and now completes in five minutes with Tanium. NEC has connected Tanium with ServiceNow to link critical asset and vulnerability information. ServiceNow is using Tanium Autonomous IT to achieve real-time endpoint visibility across 30,000 endpoints and deliver a zero touch service desk at speed and scale. UKG is transforming IT operations with Tanium Autonomous IT for ServiceNow.^[16][19]

CEC Entertainment is a family entertainment and dining company that needed to modernize its IT infrastructure. Tanium provides low-touch, high-confidence, and autonomous patching and provisioning. A Spanish insurer improves endpoint visibility and control with a solution provided jointly by EY and Tanium. Caser uses the Managed Visibility and Control service co-provided by EY and Tanium. A digital healthcare solutions provider in emerging markets across Asia and Africa had no visibility into its 2,500 laptops in 12 countries. Colgate-Palmolive uses Tanium Core and Asset Discovery & Inventory. An addiction treatment provider found its endpoint devices too hard to manage, provision, or secure.^{[2][4][5][6][7][8][9][10][16][18][19][20][21][22][23]}