CIS Logo
tagline: Confidence in the Connected World
Young woman working on a computer

Securing Apache Tomcat An objective, consensus-driven security guideline for the Apache Tomcat Server Software.

An objective, consensus-driven security guideline for the Apache Tomcat Server Software.

A step-by-step checklist to secure Apache Tomcat:

For Apache Tomcat ( version )

CIS has worked with the community since 2009 to publish a benchmark for Apache Tomcat

Join the Apache Tomcat community Arrow

Other CIS Benchmark versions:

For Apache Tomcat (CIS Apache Tomcat 8 Benchmark version 1.0.1)

Complete CIS Benchmark Archive Arrow

Arrow CIS Covers Other Server Technologies

See the full list

Information Hub : CIS Apache Tomcat Benchmarks

Ticket • 08 Nov 2018

Apache Tomcat Version 7 & 8 Benchmark

Join the Discussion Arrow

Ticket • 29 Oct 2018

Ensure only TLS 1.2 is enabled

Join the Discussion Arrow

Ticket • 29 Oct 2018

10.13 not listed in PDF for Apache 7 v.1.1.0

Join the Discussion Arrow

Ticket • 15 Oct 2018

‘Remediation’ instructs one to change permissions on file $CATALINA_HOME/conf/catalina.policy to 770

Join the Discussion Arrow