CIS Logo
tagline: Confidence in the Connected World
Young woman working on a computer

Securing Apache Tomcat An objective, consensus-driven security guideline for the Apache Tomcat Server Software.

An objective, consensus-driven security guideline for the Apache Tomcat Server Software.

A step-by-step checklist to secure Apache Tomcat:

For Apache Tomcat 9 (CIS Apache Tomcat 9 Benchmark version 1.0.0)

CIS has worked with the community since 2009 to publish a benchmark for Apache Tomcat

Join the Apache Tomcat community Arrow

Other CIS Benchmark versions:

For Apache Tomcat (CIS Apache Tomcat 8 Benchmark version 1.1.0)

Complete CIS Benchmark Archive Arrow

Arrow CIS Covers Other Server Technologies

See the full list

Information Hub : CIS Apache Tomcat Benchmarks

CONTROL: 1 --- ADVISORY CONTROL: 0
Pencil Media mention • 29 Oct 2020
CONTROL: 2 --- ADVISORY CONTROL: 0
Pencil Media mention • 28 Oct 2020
CONTROL: 3 --- ADVISORY CONTROL: 0
Pencil Blog post • 26 Oct 2020
CONTROL: 4 --- ADVISORY CONTROL: 0
Pencil White paper • 26 Oct 2020