Welcome
BigFix SaaS User Guide
This guide is for the regular users of BigFix SaaS.
Preview
Review the available Preview apps in BigFix SaaS to evaluate early-access features and manage specialized workflows.
Deployment Automation
Use Deployment Automation to attach schedules to Fixlet streams and deploy actions in sequential phases. You can organize your rollouts into independent Flows for specific device groups, and divide those Flows into sequential Rings. By setting strict success criteria such as failure thresholds and passing scores you automatically control whether a deployment progresses to the next phase or halts safely.
Enable Flows
New Flows are created in a disabled state to prevent unintended deployments. A disabled Flow will never run its scheduled deployment. You must manually enable the Flow when you are ready to begin the automation.

BigFix Documentation Homepage
BigFix SaaS Documentation
Welcome to BigFix SaaS, your comprehensive solution for cloud-based endpoint management. BigFix SaaS combines the reliability and control of BigFix with the flexibility of the cloud. Whether transitioning from an on-premises setup or exploring new possibilities, BigFix SaaS delivers simplicity, scalability, and security.
BigFix SaaS Overview
BigFix SaaS is a software-as-a-service based endpoint management platform that automates the management, patching, and inventory of nearly of nearly 120+ operating systems.
Release Notes
Learn about the updates, new features, and administrative capabilities introduced across BigFix SaaS Remediate releases. Select a release version to view the latest enhancements to your environment.
Introduction
BigFix SaaS is an endpoint management platform that automates patch management and inventory across various operating systems and apps. Benefits include cost savings, accessibility, scalability, automatic updates, quick deployment, reliability, high compatibility, SaaS security, and reduced hardware requirements.
Getting Started with BigFix SaaS
This guide helps you get started with BigFix SaaS solution for managing your endpoints. BigFix SaaS is designed to simplify and streamline the management of users, devices, and deployments within your organization.
BigFix SaaS User Guide
This guide is for the regular users of BigFix SaaS.
- My Dashboard
  The My Dashboard page serves as the central landing page for managing your BigFix SaaS environment. From this page, you can download the BigFix Agent installer to add devices to your deployment. Use the top navigation bar to access documentation and support resources with the Help Center icon, or manage your personal profile settings, account activity, and display preferences with the Account icon.
- Custom Remediation
  Remediate devices on demand using your own Bash, PowerShell, or Action Scripts. Ideal for applying quick fixes, registry changes, or patching apps not covered by default content.
- CyberFOCUS
  CyberFOCUS is a threat intelligence and remediation feature within BigFix SaaS Remediate that provides visibility into CISA KEV (Known Exploited Vulnerabilities) and MITRE ATT&CK reports. It enables users to assess their security posture and take proactive remediation actions based on real-world threat intelligence.
- Deployment Manager
  The Deployment Manager in BigFix streamlines the process of executing actions on devices within a deployment. It allows users to initiate and monitor deployments, which can range in complexity from quick tasks completed in minutes to more involved processes that may take days to finish on all targeted devices.
- Analyses
  The Analyses app lets you collect and review device data in BigFix. Use it to create analyses, define the devices they apply to, and manage the properties that each analysis reports.
- Device Explorer
  Use the Device Explorer Dashboard in BigFix to explore all connected devices in table and chart formats. Filter, sort, add devices, perform remediation, schedule maintenance, and export reports—all from one unified view.
- Fixlet Explorer
  Fixlet Explorer enables users to view and manage Fixlets, which are sets of instructions for the BigFix agent to execute on devices. Users can filter and deploy Fixlets, access detailed information on CVEs, and navigate through a data table displaying relevant Fixlet details.
- Custom Fixlets
  Custom Fixlets allow users to create user-defined remediation scripts and configuration tasks tailored to their specific environment when standard BigFix content does not meet specific requirements.
- Fixlet Streams
  Fixlet Streams help to automate the process of remediating endpoint vulnerabilities, such as patch and update deployments, while offering flexibility for manual intervention when critical issues arise. The feature ensures routine security and compliance tasks are handled efficiently, freeing up IT teams to focus on strategic initiatives. Additionally, it allows for ad-hoc remediation, enabling swift responses to urgent issues like zero-day vulnerabilities.
- Protection Level Agreement (PLA)
  Protection Level Agreements are a set of baselines that combine device contexts, and desired patch levels and compliance standards for a given set of Fixlets against agreed-to organisational service levels by key stakeholders including IT, Security, and the overall organization.
- All Reports
  The All Reports page provides a central location to view, manage, and organize all reports available in BigFix SaaS. From this page, you can apply filters, delete reports, and manage report visibility. You can also mark reports as Favorites.
- Migrate
  The Agent Migration feature allows you to seamlessly migrate your devices from BigFix on-premises to BigFix SaaS. This process utilizes a universal Fixlet for deployment and allows users to track the migration status through the migration dashboard.
- User Management
  The User Manager application in BigFix SaaS provides administrators with a robust interface to efficiently manage user accounts, roles, permissions, and activities in BigFix SaaS. This guide walks you through the process of creating new users, disabling or deleting existing users, setting passwords, managing roles, and more, ensuring you have a smooth and efficient experience.
- Preview
  Review the available Preview apps in BigFix SaaS to evaluate early-access features and manage specialized workflows.
  - Checklists
    Activate security benchmark checklists in Preview Apps to evaluate device compliance across your environment and consolidate continuous assessment results in a single location. Each checklist covers a specific benchmark and consists of individual checks, each with its own set of applicable devices.
  - Download Plugins
    BigFix SaaS clients download public patches directly from the internet by default. For repositories protected by vendor credentials or entitlement certificates, Download Plugins route requests through the BigFix Root Server. The Root Server authenticates with the vendor repository using stored credentials and distributes the content to managed endpoints.
  - Software Distribution
    Software Distribution enhances the capabilities of BigFix with the ability to deploy software to managed devices from a single location. It allows organizations to add custom software entries beyond the pre-built catalog and manage those deployments through centralized workflows.
  - Remote Control
    Use the Remote Control preview app to start or join a peer-to-peer screen-sharing session between a BigFix SaaS administrator and a client or end user. Administrators can initiate a remote assistance session by sharing an access code with the user, though current capabilities are limited to read-only screen sharing.
  - Agent Query
    Use the Agent Query feature to run read-only Relevance-language expressions against specific managed endpoints to retrieve real-time data. You can execute ad-hoc queries or save them for repeated use. These queries only collect information and do not change anything on the device.
  - MCP Server Download
    The MCP Server Download Preview app provides a centralized download for the BigFix SaaS MCP Server. Once installed locally, the server acts as a bridge between BigFix SaaS APIs and supported LLM clients, including Claude Desktop, Claude Code, VS Code, and Copilot CLI.
  - Deployment Automation
    Use Deployment Automation to attach schedules to Fixlet streams and deploy actions in sequential phases. You can organize your rollouts into independent Flows for specific device groups, and divide those Flows into sequential Rings. By setting strict success criteria such as failure thresholds and passing scores you automatically control whether a deployment progresses to the next phase or halts safely.
    - Create Flows
      After you create a Deployment Automation, you must define at least one Flow to dictate the deployment schedule and the overall target device group.
    - Configure Deployment Rings
      Edit the default Ring and add new Rings to configure a phased deployment sequence. As a Flow runs, it evaluates strict criteria to determine if it can safely progress from one Ring to the next.
    - Enable Flows
      New Flows are created in a disabled state to prevent unintended deployments. A disabled Flow will never run its scheduled deployment. You must manually enable the Flow when you are ready to begin the automation.
  - CVE Search
    The CVE Search app allows users to input a list of CVEs to quickly identify whether or not Fixlets are available to remediate them. When Fixlets are available, CVE Search will also provide immediate visibility into the number of exposures.
- Integrated Vulnerability Remediation
  Integrated Vulnerability Remediation (IVR) provides a real-time overview of security vulnerabilities categorized by severity, using both the Common Vulnerability Scoring System (CVSS) and the Vulnerability Priority Rating (VPR). Use this feature to configure data sources, visualize vulnerability data in charts, and manage individual vulnerabilities in a detailed table. You can also manually import vulnerability data from external sources using the Universal Vulnerability Ingestion (UVI) feature. You can remediate vulnerabilities directly from the dashboard and export the data.
Guides in PDF format
This section contains links to PDF versions of all the BigFix SaaS product guides.
Frequently Asked Questions

Enable Flows

New Flows are created in a disabled state to prevent unintended deployments. A disabled Flow will never run its scheduled deployment. You must manually enable the Flow when you are ready to begin the automation.

About this task

To enable and monitor a flow, follow these steps:

Procedure

On the automation details page, locate the Flow you want to manage.
Select the More options icon (the three dots) located on the right side of the Flow.
Select Enable from the menu.
Monitor the status icons on the Flow Rings as the scheduled time approaches:
- Pause icon (yellow): The Ring is in a pending state, analyzing applicability and calculating Fixlet requirements.
- Running icon (blue): The Ring is actively deploying.
- Green thumbs up icon: The Ring succeeded and met the passing criteria.
- Red circle with an X icon: The Ring failed to meet the passing criteria.