# HCL BigFix vs Puppet Bolt

| Attribute | HCL BigFix | Puppet Bolt |
|---|---|---|
| **Vioscale score** | 60.5 (27% (low)) | 53.9 (13% (low)) |
| deployment.options | `{"cloud":true,"on_prem":true,"air_gapped":true,"self_hosted":true}` | `{"cloud":true,"hybrid":true,"on_prem":true,"air_gapped":true,"self_hosted":true}` |
| description.long | A platform that manages and secures endpoints—servers, laptops, mobile devices, and specialized hardware—across on-premise, virtual, and cloud environments through continuous monitoring, policy enforcement, and automated remediation. | - |
| features.capabilities | `{"model":"both","hosting":"both","architecture":"agent","desired_state":true,"windows_support":true,"policy_compliance":true,"cloud_provisioning":true,"enterprise_edition":true}` | `{"hosting":"both","desired_state":true,"windows_support":true,"open_source_core":true,"policy_compliance":true,"cloud_provisioning":true,"enterprise_edition":true}` |
| integrations.count | 20 | 11 |
| integrations.list | `[{"name":"Slack"},{"name":"Docker Desktop"},{"name":"GitHub Desktop"},{"name":"GitLab"},{"name":"Microsoft Power BI"},{"name":"Tableau Desktop"},{"name":"SharePoint"},{"name":"OpenVPN Connect"},{"name":"Duo Desktop"},{"name":"AWS VPN Client"},{"name":"Azure CLI"},{"name":"Genesys Cloud"},{"name":"VMware Horizon Client"},{"name":"Parallels Client"},{"name":"Nextcloud"},{"name":"iCloud"},{"name":"Firefox"},{"name":"Eclipse"},{"name":"R"},{"name":"Go Programming Language"}]` | `[{"name":"ServiceNow"},{"name":"VMware"},{"name":"Argo CD"},{"name":"Jenkins"},{"name":"Dynatrace"},{"name":"Datadog"},{"name":"New Relic"},{"name":"CIS Benchmarks"},{"name":"Tenable Nessus"},{"name":"DISA STIG"},{"name":"Splunk"}]` |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"web":true,"linux":true,"windows":true}` | `{"cli":true,"mac":true,"linux":true,"windows":true}` |
| pricing.model | commercial | commercial |
| security.hipaa | yes | - |
| security.pci | yes | - |
| security.soc2 | yes | - |

## Capabilities (Configuration Management Tools)

| Capability | HCL BigFix | Puppet Bolt |
|---|:--:|:--:|
| **Core** |  |  |
| Architecture | Agent-based | - |
| Push / pull model | Both | - |
| Config language | - | - |
| **Deployment** |  |  |
| Masterless mode | - | - |
| Hosting | Cloud + self-hosted | Cloud + self-hosted |
| **Correctness** |  |  |
| Idempotent | - | - |
| **Model** |  |  |
| Desired-state declarative | ✓ | ✓ |
| **Ecosystem** |  |  |
| Content registry | - | - |
| **Platform** |  |  |
| Windows support | ✓ | ✓ |
| **Scope** |  |  |
| Cloud provisioning | ✓ | ✓ |
| **Governance** |  |  |
| Policy / compliance | ✓ | ✓ |
| **Commercial** |  |  |
| Enterprise edition | ✓ | ✓ |
| **Licensing** |  |  |
| Open-source core | - | ✓ |

*Source: Vioscale. Generated 2026-09-01T15:17:54.772Z. "-" = undocumented, not absent.*