Sold by
Tanium Inc Cloud
Real-time visibility and control across every endpoint
Reviews (81)
Anonymous
Effective for Configuration Management with Room for Improvement
Reviewed on Jul 22, 2026
Review provided by G2
What do you like best about the product?
I appreciate Tanium's NLP and live actions, which have optimized the learning curve and lead time from design to deployment of config. I also like how it handles instantaneous groups of servers, and the reports and analytics through natural language queries.
What do you dislike about the product?
I find legacy support essential in many enterprises, but Tanium doesn’t cover it.
What problems is the product solving and how is that benefiting you?
I use Tanium for device configuration management, which gives me better control of on-prem servers and risk reduction. It optimizes the learning curve and speeds up deployment with NLP queries for quick analytics.
Sandeepraj Gatla
Endpoint monitoring has strengthened incident response and provides rapid isolation and forensics
Reviewed on Jul 20, 2026
Review provided by PeerSpot
What is our primary use case?
Implementation is based on client requirement and we don't create any particular policies or any rules among all the networks. The decision is completely based on client-side requirement. Analytics are also completely based on client requirement. To the end users, everything is completely provided by the client. We don't know exactly what they have invested in the particular tool or the subscription value. However, I can suggest that it plays a main role while any high alert is going on and it should be present in any endpoint or any user's machine within enterprise-level security patches.
What is most valuable?
Tanium provides an endpoint which is isolated from the network and environment. We can easily search its logs and history and connect remotely directly to that particular device which has been isolated from the network. We can search for the history and logs, including audit logs and event logs. The complete activity of the user or owner of the device is visible to us. We can see the artifacts of particular USB transfers internally for official use.
We can not only connect remotely but also see the device status and how many failures have occurred within the network so far. We can see the IP address, how many times it has changed its IP address, and how many times it was connected to VPN or external VPN or internal VPN and what has been searched while on VPN. We can block the IOCs or IP addresses as well. We can block domains, hashes, SHA values, SHA-256, SHA-1, SHA-5 and MD5.
Although I am not completely involved in the automation team, we do have that team and I have worked in some CERT recently. Tanium is more useful while we are in the CERT because most of the times when we are on high alert, Tanium does play a main role for that particular incident or any high case. Tanium is a simple tool and we can easily integrate it to many devices and it is a mandatory tool to secure an endpoint. It is mandatory to give any RDP connection and the tool should be present in the particular device. It is completely mandatory and it is in the policy as well.
What needs improvement?
In my opinion, sometimes it takes a long time to give solutions or resolve the issue. Tanium side team will respond instantly but sometimes they are delaying in the response. These are the two major causes which I have observed so far. Additionally, while remotely connecting, sometimes it automatically disconnects and the issue is still unresolvable. We are working on that, but it is still a question mark.
For how long have I used the solution?
I have four years of experience in cybersecurity and I have experience with Tanium for around two years.
Which solution did I use previously and why did I switch?
I am not using Sophos products like Cloud Optix or Sophos Labs. Previously, I worked in one organization which used Sophos Firewall Endpoint and XDR, and SecurOn as well. However, I have joined a new organization and they are not using either SecurOn or Sophos.
How was the initial setup?
It is completely simple and no need for any tension while installing it.
What was our ROI?
Tanium is a simple tool and we can easily integrate it to many devices and it is a mandatory tool to secure an endpoint. It is mandatory to give any RDP connection.
What's my experience with pricing, setup cost, and licensing?
It is moderate. It is not that much too costly or really that much low cost, but it is moderate.
Which other solutions did I evaluate?
Splunk or CrowdStrike are competitors for Tanium right now. However, Tanium is still at the top.
What other advice do I have?
We are not reselling Tanium but we are taking services from them. Implementation is based on client requirement. The review rating for this product is nine out of ten.
syed i.
Real-Time Endpoint Visibility and Powerful Automation in One Platform
Reviewed on Jul 19, 2026
Review provided by G2
What do you like best about the product?
Tanium’s biggest strength is its real-time visibility across all endpoints from a single platform. It allows administrators to quickly identify devices, assess vulnerabilities, deploy patches, and take immediate action without relying on multiple tools. Its scalability, automation capabilities, and integration with enterprise security solutions make endpoint management more efficient and improve an organization’s overall security posture.
What do you dislike about the product?
While Tanium is a powerful platform, it has a steep learning curve for new users due to its extensive feature set. Some advanced configurations and reporting can be complex, and the interface may feel overwhelming at first. Additionally, licensing costs can be high for smaller organizations, and getting the most value from the platform often requires proper training and experienced administrators.
What problems is the product solving and how is that benefiting you?
Tanium helps solve the challenge of managing and securing large numbers of endpoints from a single platform. It provides real-time visibility into device health, software inventory, vulnerabilities, and patch compliance, allowing issues to be identified and remediated quickly. This reduces manual effort, improves security, speeds up incident response, and helps maintain compliance across the environment. As a result, endpoint administration becomes more efficient and reliable.
Zaid K.
Simplifies Security with Real-Time Visibility
Reviewed on Jul 17, 2026
Review provided by G2
What do you like best about the product?
I really like Tanium for patch management, asset discovery, and inventory. The incident response is really good; it allows me to monitor system activity in real time. It also enables my team to isolate compromised devices and mitigate cyber attacks. Switching to Tanium was easier compared to other products like CrowdStrike Falcon, and we received support during the setup, which made configuring everything easy.
What do you dislike about the product?
Nothing as of now
What problems is the product solving and how is that benefiting you?
I use Tanium as a single platform instead of multiple tools, providing real-time visibility for security and patch management, easily identifying and securing issues. It supports asset discovery, inventory, incident response, and helps teams isolate compromised devices, mitigating cyber attacks effectively.
Lalit Y.
Real-Time Endpoint Management, Seamless Setup
Reviewed on Jul 17, 2026
Review provided by G2
What do you like best about the product?
I like the real-time endpoint visibility that Tanium provides. It gives me immediate patch status, which is really valuable. The initial setup was easy for my team.
What do you dislike about the product?
Nothing
What problems is the product solving and how is that benefiting you?
I use Tanium for patch management and real-time endpoint visibility, providing immediate patch status and real-time visibility.
Automotive
Lightning-Fast Endpoint Queries with Powerful Custom Automation
Reviewed on Jul 02, 2026
Review provided by G2
What do you like best about the product?
In a nutshell, it’s a way to send and receive data to endpoints really fast and dynamically.
The appeal of their platform is how they pull this off. Being able to live-query or execute across 10,000 endpoints in 30 seconds is pretty awesome.
I tend to skip a lot of the out-of-the-box stuff, because it’s almost never designed for anyone’s specific use case. For me, the real benefit is the platform itself and the custom content you can build on top of it.
Sensors are custom-designed scripts to gather whatever data you want, in whatever two-dimensional way you want. Packages let you deploy scripts to make changes to systems, whether that’s uninstalling, installing, changing reg keys, updating group policy, etc. Automate lets you chain sensors and packages together for more advanced routines—think downtime procedures, or a series of if/then/else steps.
The biggest benefit for me has been using it to answer C-suite questions immediately. They ask something, I write a short sensor script, push it out, and I instantly have an answer. From there, I can chain it into a package to fix the underlying problem, and then schedule that sensor and package to run automatically. In an afternoon, it becomes something I don’t have to worry about again.
If you get caught up in all the frills and extra stuff they layer on top, you might be disappointed—unless what they built happens to match your exact use case. But if you think of it mainly in terms of those three (really just two) core pieces, and you have people you can dedicate to learning and using it well, it’s a great tool.
The appeal of their platform is how they pull this off. Being able to live-query or execute across 10,000 endpoints in 30 seconds is pretty awesome.
I tend to skip a lot of the out-of-the-box stuff, because it’s almost never designed for anyone’s specific use case. For me, the real benefit is the platform itself and the custom content you can build on top of it.
Sensors are custom-designed scripts to gather whatever data you want, in whatever two-dimensional way you want. Packages let you deploy scripts to make changes to systems, whether that’s uninstalling, installing, changing reg keys, updating group policy, etc. Automate lets you chain sensors and packages together for more advanced routines—think downtime procedures, or a series of if/then/else steps.
The biggest benefit for me has been using it to answer C-suite questions immediately. They ask something, I write a short sensor script, push it out, and I instantly have an answer. From there, I can chain it into a package to fix the underlying problem, and then schedule that sensor and package to run automatically. In an afternoon, it becomes something I don’t have to worry about again.
If you get caught up in all the frills and extra stuff they layer on top, you might be disappointed—unless what they built happens to match your exact use case. But if you think of it mainly in terms of those three (really just two) core pieces, and you have people you can dedicate to learning and using it well, it’s a great tool.
What do you dislike about the product?
I hope the parent company has all the targeting set up correctly so our servers don’t get hit by unnecessary tools. FIM, Conply, Patch, Reveal, etc., etc.
What problems is the product solving and how is that benefiting you?
Every Tanium install has the framework to do queries and make certain changes. As others said, the secret sauce is how Tanium is able to scale. Also, their sensors and packages are based on well-known languages (Powershell, Python, Bash, etc) so there is no need to learn a special language to make it work.
Besides that, it depends what modules your new company owns. Modules are add-ons you can purchase from Tanium. One does patching. Another scans for vulnerabilities. Another does file integrity monitoring. So it's a fairly wide range of possibilities.
We run Tanium alongside our anti-virus solution. Tanium provides documentation on the exclusions. They also provide free training.
Besides that, it depends what modules your new company owns. Modules are add-ons you can purchase from Tanium. One does patching. Another scans for vulnerabilities. Another does file integrity monitoring. So it's a fairly wide range of possibilities.
We run Tanium alongside our anti-virus solution. Tanium provides documentation on the exclusions. They also provide free training.
Safik A.
Real-Time Monitoring Enhances IT Efficiency
Reviewed on Jun 29, 2026
Review provided by G2
What do you like best about the product?
I like Tanium for its real-time monitoring, quick response, and efficient endpoint management and troubleshooting. Real-time features help me quickly identify endpoint issues, check device health, and respond faster, reducing troubleshooting time and improving operational efficiency.
What do you dislike about the product?
The interface and navigation could be improved to make daily tasks easier. More customization options and reports would also be helpful.
What problems is the product solving and how is that benefiting you?
I use Tanium to quickly identify endpoint issues, monitor devices, and support IT operations with real-time monitoring and quick response, reducing troubleshooting time and improving efficiency.
Sanket B.
Streamlined Workflows and Effortless Third-Party Integrations
Reviewed on Jun 24, 2026
Review provided by G2
What do you like best about the product?
Enhanced third-party integration solutions and the ability to discover all assets through streamlined workflows really make this application stand out in the industry. When it comes to integration, the application has built-in capabilities to connect with some well-known applications without much effort.
What do you dislike about the product?
AI stuff is still new and lot to cover. Application support could be much better. While discovering assets and storing into CMDB, still few parameters are undiscoverable.
What problems is the product solving and how is that benefiting you?
Discovery of Assets and populating CMDB, Feeding this data as true source to other 3rd party application is the best thing Tanium can do. Trying to leverage AI model as well in discovery.
Saddam H.
Real-Time Endpoint Visibility and Control at Scale with Tanium
Reviewed on Jun 23, 2026
Review provided by G2
What do you like best about the product?
What I like best about Tanium is its ability to provide real-time visibility and control across a large number of endpoints from a single platform. It helps IT and security teams quickly identify issues, deploy fixes, and maintain compliance without the delays often seen in traditional endpoint management tools. Its speed and scalability make day-to-day operations much more efficient.
What do you dislike about the product?
One thing I dislike about Tanium is that it can have a steep learning curve for new users. Its wide range of features and powerful capabilities can feel overwhelming at first, and proper training is often needed to make full use of the platform. Additionally, some organizations may find the licensing and implementation costs relatively high.
What problems is the product solving and how is that benefiting you?
Tanium solves the problem of managing and securing a large number of endpoints in real time. It gives a centralized view of devices, software, vulnerabilities, and compliance status across the entire network.
For me, the biggest benefit is that it helps identify issues quickly, deploy updates faster, and reduce manual effort. This improves operational efficiency, strengthens security, and allows problems to be resolved before they have a major impact on users or business operations.
For me, the biggest benefit is that it helps identify issues quickly, deploy updates faster, and reduce manual effort. This improves operational efficiency, strengthens security, and allows problems to be resolved before they have a major impact on users or business operations.
Sherif A.
One Console for Endpoint Security and Asset Visibility
Reviewed on Jun 15, 2026
Review provided by G2
What do you like best about the product?
One of the best endpoints and platforms used for discover and manage systems and securing a lot of devices using a single console with assets visibility
What do you dislike about the product?
I couldn't find anything to be disliked about the system and all are great and i am happy yo use it in my company and recommend it to other companies to use it
What problems is the product solving and how is that benefiting you?
Problems Tanium Solves
1. Lack of Endpoint Visibility
Many organizations struggle to know:
How many endpoints they actually have.
Which devices are online or offline.
What software is installed.
Which devices are missing security updates.
Tanium solves this by providing near real-time inventory and visibility across all endpoints from a single console.
2. Slow Incident Response
Traditional tools may take hours or even days to collect endpoint information during a security investigation.
Tanium allows security teams to query all endpoints within seconds or minutes, enabling them to quickly answer questions such as:
Which machines have a specific malicious file?
Which devices are running a vulnerable version of software?
Which users logged into an affected machine?
1. Lack of Endpoint Visibility
Many organizations struggle to know:
How many endpoints they actually have.
Which devices are online or offline.
What software is installed.
Which devices are missing security updates.
Tanium solves this by providing near real-time inventory and visibility across all endpoints from a single console.
2. Slow Incident Response
Traditional tools may take hours or even days to collect endpoint information during a security investigation.
Tanium allows security teams to query all endpoints within seconds or minutes, enabling them to quickly answer questions such as:
Which machines have a specific malicious file?
Which devices are running a vulnerable version of software?
Which users logged into an affected machine?