Masking Apache Tomcat version

Last updated: 9/10/2026

To secure Apache Tomcat server from malicious attacks, it is necessary to hide its version information.

Procedure

Create a folder under <TomcatPath>/lib/org/apache/catalina/util.
Create a file ServerInfo.properties.
Add a property in the file and mask the property server.info:

server.info=Apache Tomcat Version XYZ
Save the file.

If you find any issues with this page or its content – a typo, a missing step, or a technical error – please let us know!