Securing Apache HTTP Server

An objective, consensus-driven security guideline for the Apache HTTP Server Server Software.

A step-by-step checklist to secure Apache HTTP Server:

Download Latest CIS Benchmark Free to Everyone
For Apache HTTP Server 2.4 (CIS Apache HTTP Server 2.4 Benchmark version 2.0.0)

CIS has worked with the community since 2010 to publish a benchmark for Apache HTTP Server.

Other CIS Benchmark versions:

For Apache HTTP Server (CIS Apache HTTP Server 2.2 Benchmark version 3.6.0)
Complete CIS Benchmark Archive

CIS Covers Other Server Technologies

See the full list