Emeryville, Calif., November 28, 2005 —BigFix, a leading provider of enterprise security configuration management solutions, has been named a “Strong Performer” in the Forrester Wave Report: “Security Configuration Management, Q4 2005.” BigFix was among 11 companies covered in the report, which examined management tools that combine automated remediation, configuration compliance, patch management and vulnerability assessment capabilities. Security configuration management solutions for networked enterprise infrastructures help customers assess endpoint system configurations against known vulnerabilities and desired corporate compliance policies, and execute necessary changes to bring these devices into compliance.

High Marks for Innovation and Effectiveness

Forrester evaluated BigFix on its product offering, business strategy, and market presence. Based on these criteria, Forrester recognized BigFix as a “Strong Performer,” with the company receiving high scores in the vulnerability assessment and cost categories.

In rating BigFix as an innovative vendor, Forrester emphasized BigFix’s industry-leading vulnerability assessment capabilities, and out-of-the-box support for dozens of platforms and applications. The report also noted that BigFix is one of only two vendors that integrate security and systems management components in a single architecture. Furthermore, the BigFix solution is well-suited to distributed environments supporting high numbers of mobile users, and can be customized to meet a firm’s specific requirements.

Forrester Analyst and BigFix Management Comments

Writes David Friedlander in the October 2005 Security Configuration Management Scorecard Summary: BigFix report: “Forrester evaluated the BigFix Enterprise Suite against a comprehensive list of security and configuration management criteria. We classed the BigFix solution as a 'Strong Performer' based on its robust vulnerability management capabilities, ability to manage remote computers effectively, strengths in administration and management, and technology architecture that delivers multiple security configuration management functions in a single platform. We also found that BigFix customers report getting superior customer service and responsiveness compared with larger software firms.”

“The Forrester Wave report on Security Configuration Management validates the proposition that enterprises need to put a solution in place to manage security and reduce risk through proactive configuration and regulatory compliance-driven management of endpoint devices,” said George Kellar, chief marketing officer at BigFix. “We are pleased that the report highlights BigFix as an innovator offering industry-leading vulnerability assessment, compliance and reporting capabilities in the growing security configuration management market. We are very proud that our customers, who include some of the leading enterprises and government institutions worldwide, found our customer service and responsiveness superior to their other vendors.”

BigFix provides scalable, easy-to-use security configuration management solutions for global enterprises, managed service providers and public sector organizations using information technology to optimize regulatory compliance, corporate governance, business agility and operations continuity. With customer implementations on thousands to tens-of-thousands of endpoint desktop and mobile PCs, workstations and servers managing millions of changes across distributed IT infrastructures and networks, BigFix solutions help improve business processes, enhance security, and deliver more reliable IT services, while reducing costs and administrative overhead.

About Forrester Research
Forrester Research is an independent technology and market research company that provides pragmatic and forward-thinking advice about technology's impact on business and consumers. For the full Forrester Wave report: "Security Configuration Management, Q4 2005," please visit: http://www.forrester.com.

About BigFix, Inc.
BigFix enables organizations to better manage their global IT infrastructures with solutions to discover, analyze, change and maintain security and software configurations faster and more accurately, resulting in improved processes, greater visibility, better security and more reliable services while reducing costs. For more information, visit http://www.bigfix.com.