Apache HTTP: https://benchmarks.cisecurity.org/tools2/apache/CIS_Apache_H...
Tomcat: https://benchmarks.cisecurity.org/tools2/apache/CIS_Apache_T...