Detect Apache Tomcat
Apache Tomcat is an open-source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and WebSocket technologies.
Detection looks at response headers across 2 fingerprint rules among the site's public responses.
01
Websites using Apache Tomcat
Loading website list…
02
Signal classes
PluginView evaluates public page signals in these classes when identifying Apache Tomcat. Individual fingerprint rule bodies are proprietary and are not published.
- Response headers
03
Example public indicators for Apache Tomcat
Illustrative indicators derived from public catalog metadata for Apache Tomcat. A live scan may match additional proprietary rules beyond these examples.
- server: Apache-Coyote
- x-powered-by: \bTomcat\b-?
04
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known Apache Tomcat signature (2 rules) at the time of the scan.
- Does not establish
- A sitewide install of Apache Tomcat, an active vendor contract, exclusive use, or that Apache Tomcat is still in place today.
05
How to check a site for Apache Tomcat
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest Apache Tomcat signals.
- 2. PluginView reads only public responses (response headers) and scores them against the Apache Tomcat signature set (2 rules).
- 3. Review the confidence score and text explanation for Apache Tomcat on the results page.
06
Commonly implies
A confirmed Apache Tomcat match also implies these technologies are present.
07
FAQ: detecting Apache Tomcat
- Can PluginView detect Apache Tomcat without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for Apache Tomcat — typically response headers. It does not bypass authentication or paywalls.
- What category is Apache Tomcat?
- Apache Tomcat is classified under Web servers in the PluginView directory.
- How many fingerprint rules cover Apache Tomcat?
- This reference currently tracks 2 fingerprint rules across response headers. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses Apache Tomcat?
- Illustrative public indicators for Apache Tomcat include server: Apache-Coyote; x-powered-by: \bTomcat\b-?. A live scan may match additional proprietary rules beyond these examples.
