Skip to main content

Still Running Tomcat 7?
You’re at Risk.

Tomcat 7 reached End of Life in 2010. With hundreds of vulnerabilities discovered since, your business may be exposed.

Get Protected with Tomitribe Support

The Risk of Running Tomcat 7

Tomcat 7 has been End of Life since 2010, which means no official updates or patches. Since then, more than 239 new CVEs have been discovered — each requiring manual review to know if you’re affected, creating costly overhead. Even during its supported lifecycle, Tomcat 7 faced 80 CVEs, proving vulnerabilities are a constant risk.

What This Means for Your Business

  • Increased security risks — potential data breaches, loss of customer trust, and exposure to attacks.

  • Compliance violations — many industries (finance, healthcare, government) require supported software. Running End-of-Life products may mean breaking regulations or even the law.

  • Higher operational costs — manual CVE checks, firefighting issues, and wasted engineering hours.

  • Downtime & instability — unsupported versions break with modern integrations, causing service outages.

What Does Tomcat 7 Enterprise Support Cover?

24/7 Technical Assistance

Receive around-the-clock support from our expert developers via support portal, email, and phone.

Security Patching

Stay protected with dedicated security teams providing CVE notifications and patches 365 days a year for your exact Tomcat version

Feature Development

Custom feature enhancements, ensuring that the development aligns with your specific needs and contributes back to the community.

Training Services

Boost team productivity with comprehensive Apache TomEE training, enhancing knowledge and proficiency in DevOps and development.

Professional Services

Get expert assistance for migration efforts, architecture review, and knowledge transfer to ensure smooth and efficient operations.

Lifecycle Support

Tomtiribe's support team is comprised of Apache Committers; we assure swift responses and expert resolutions.

Tomitribe Subscription Levels

Subscription Level
Bronze
Silver
Gold
Core Count
64 cores
120 cores
248 cores
Apache Tomcat
Apache TomEE
Apache ActiveMQ
SLA
24x7
24x7
24x7
Response Time
1hr
1hr
1hr
Incidents
unlimited
unlimited
unlimited
CVE Patching
unlimited
unlimited
unlimited
Developer Questions
1 parallel
2 parallel
4 parallel
Admin Contacts
2
3
4
Phone, Email, Portal
Professional Services
3 days
5 days
10 days
Training
2 days
3 days
5 days
Feature Development
10 days
17 days
25 days

What Our Customers Are Saying

“It is very valuable for DFS to have a reliable partner to provision patches for the Open Source products in our production environments. We trust Tomitribe to provide us with security patches at short notice.”

Manfred KempfHead of AIS & IDP Systems at DFS Deutsche Flugsicherung

“Ridango's endorsement of Tomitribe demonstrates our commitment to maintaining a robust and secure infrastructure, with Tomitribe serving as a trusted partner for handling critical security updates.”

Ziga PodgrajsekHead of IT at Ridango AS

How We Count Cores

Our subscription levels are based on the core count allocated to the Java process where Tomcat runs, whether in virtual, containerized, or bare-metal environments.

Still not sure what your core count is?

Clarify your Core Count

Frequently Asked Questions

How are cores counted?

We consider the total number of cores—whether physical or virtual—across all instances of TomEE, Tomcat, and ActiveMQ when determining support coverage. This means every core running our binaries needs to be included under your support subscription.

Our approach ensures comprehensive support for your entire infrastructure, providing you with the necessary resources and expertise to maintain optimal performance and security for all your Tomitribe-supported applications.

For a more detailed description and examples please visit the subscription guide page

Do you offer CVE Patches & Notification?

In 2 years Tomitribe support has patched over 80 CVEs on Apache Tomcat, TomEE & ActiveMQ. Our teams work together to make surviving the frequency of CVEs possible. For more info visit our CVE Support Page.

Scan

365 days a year we automatically scan your exact versions of Tomcat, TomEE, or ActiveMQ.

Discover & Notify

Vulnerabilities receive immediate attention from our support team & support tickets are created on your behalf in our portal.

Assess & React

We work collaboratively to help determine if your application is affected & backed by our support team, you react appropriately & own risk confidently

Patch & Rollout

The Tomitribe Support team immediately begins work on a patch for your version, new binaries are posted to your open ticket, & can be rolled out immediately.

Partnership Rewards

The Tomitribe Community Partnership Program is a rewards program designed to reduce the total cost of ownership of open source for our best customers.  Modeled after a frequent flyer program, Enterprise Subscribers are rewarded with complimentary services that include time with the Tribe.

  • Included Professional Services, Training, Feature Development days are free rewards and not redeemable for cash
  • Free rewards cannot be exchanged or traded and are non-transferable to other services or offerings
  • Unused free rewards expire at the end of the service term

For more info visit Tomitribe Community Partnership Program

Scanned for Vulnerabilities lately?

CVEs are not black & white. Knowledge of both the application & server is required to determine risk & appropriate reaction. Tomitribe works with your teams to make surviving the frequency of CVEs possible.

Check out this video where Tomitribe’s David Blevins & Jonathan Gallimore join Sonatype to discuss & explain the Top 5 Apache Tomcat security vulnerabilities.

Get a Quote or Schedule a call with our Support & Sales Team.

To get a quote for support: 

  • Please fill in all required info and the “Core Count” field. If you are not sure how to count them here is some guidance. “How to Count Your Cores

What to expect during the call (est. 30-40 minutes):

  • A brief conversation about your organization’s needs and requirements.
  • A slide deck of our yearly support subscription offers with Q & A
  • Tailor quotation based on your needs and requirements
  • No commitment whatsoever

We are looking forward to discussing your organization’s needs for support.

* These fields are required.