CIS Logo
tagline: Confidence in the Connected World
Home • Resources • Benchmarks • CIS Apache Tomcat Benchmarks
Young woman working on a computer

Securing Apache Tomcat An objective, consensus-driven security guideline for the Apache Tomcat Server Software.

An objective, consensus-driven security guideline for the Apache Tomcat Server Software.

A step-by-step checklist to secure Apache Tomcat:

For Apache Tomcat ( version )

CIS has worked with the community since 2009 to publish a benchmark for Apache Tomcat

Join the Apache Tomcat community Arrow

Other CIS Benchmark versions:

For Apache Tomcat (CIS Apache Tomcat 8 Benchmark version 1.0.1)

Complete CIS Benchmark Archive Arrow

Arrow CIS Covers Other Server Technologies

See the full list

Information Hub : CIS Apache Tomcat Benchmarks

Discussion • 18 Jun 2018

Assessment of Apache Tomcat 7

Join the Discussion Arrow

Ticket • 27 Apr 2018

#10 1.8.4 Ensure secure is set to true only for SSL-enabled Connectors

Join the Discussion Arrow

Ticket • 27 Apr 2018

#112 10.6 - inacurate rationale

Join the Discussion Arrow

Ticket • 27 Apr 2018

#9 1.9.5 Ensure pattern in context.xml is correct

Join the Discussion Arrow