Tomitribe
Tomitribe provides 24/7 enterprise support, CVE patching, and end-of-life extensions for Apache TomEE, Tomcat, and ActiveMQ, delivered by the same Apache committers who author the upstream code.
- Company typePrivate
- Founded2013
- HeadquartersSanta Monica, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Tomitribe does
Tomitribe is a privately held enterprise support company founded in 2013 by David Blevins (co-founder of Apache TomEE and former IBM engineer) and headquartered in Santa Monica, California. The company provides SLA-backed, 24/7 commercial support for three Apache open source projects: Apache TomEE (a JavaEE/Jakarta EE application server), Apache Tomcat (a Java servlet container), and Apache ActiveMQ Classic (a JMS message broker). Its differentiation rests on the fact that its engineering staff are Apache Project Committers who author and maintain the upstream code, enabling code-level CVE analysis, backported security fixes, and extended end-of-life coverage for at least five years beyond community sunset. The company reports having patched over 120 CVEs across its supported projects in the past three years, with 2-week patch delivery and 1-hour Severity-1 response SLAs.
Tomitribe firmographics
Firmographics- Name
- Tomitribe
- Legal name
- Tomitribe
- Website
- https://tomitribe.com
- Company type
- Private
- Founded year
- 2013
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Tomitribe provides 24/7 enterprise support, CVE patching, and end-of-life extensions for Apache TomEE, Tomcat, and ActiveMQ, delivered by the same Apache committers who author the upstream code.
- Ownership category
- akta.pro rank
Tomitribe industry classification
Industry- Product category
- Enterprise Open Source Middleware Support
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821), Computer Systems Design and Related Services (54151)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Prepackaged Software (7372)
- akta.pro primary industry
- Cloud-Native Application Development (Containers/Kubernetes/Serverless) (BPAEAFAE)
- akta.pro secondary industry
- Webhooks, Eventing & Message Streaming (BPAMAOAE)
Keywords
Where Tomitribe is headquartered
LocationHeadquarters
- HQ city
- Santa Monica
- HQ country
- United States
- HQ region
- North America
Markets served
Tomitribe business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Binary Subscription: Fixed-price monthly subscription providing access to CVE-patched TomEE or Tomcat binaries for a specific software platform (e.g., Oracle Insurance Policy Administration Suite, OpenText AppWorks, Dassault Systèmes ENOVIA). Includes unlimited cores, 8-year commercial lifecycle, CVE alerts, and updates. Sold at $612/month with a 12-month minimum commitment. Support is not included.
- Enterprise Support Subscription: Tiered annual subscription (Bronze/Silver/Gold) priced by core count allocated to the Java process. Includes 24/7 support from Apache committers, unlimited incidents, CVE patching, professional services, training, and feature development days. Core tiers: 64 cores (Bronze), 120 cores (Silver), 248 cores (Gold). Price is quote-based (contact sales).
- Professional Services (within Enterprise Subscription): Included as complementary rewards within the Enterprise Support subscription (Bronze: 3 days, Silver: 5 days, Gold: 10 days). Covers migration assistance, architecture review, and knowledge transfer. Also available as standalone paid engagements for non-subscribers.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | Binary Subscription - $612/month per platform product |
| Subscription | Annual | Enterprise Support Bronze - up to 64 cores |
| Subscription | Annual | Enterprise Support Silver - up to 120 cores |
| Subscription | Annual | Enterprise Support Gold - up to 248 cores |
Go-to-market motion3 records
Distribution channels2 records
Marketing channels7 records
Tomitribe product offering
Product offeringCore offering
Tomitribe provides enterprise-grade, commercially supported builds of Apache open-source software — Apache TomEE (JavaEE/JakartaEE application server), Apache Tomcat (Java servlet container), and Apache ActiveMQ (Java message broker). Its core offering combines CVE-patched binary subscriptions with tiered enterprise support subscriptions (Bronze/Silver/Gold), delivered by Apache Project Committers who author the upstream code. The company also offers an End-of-Life (EOL) support extension program and proactive vulnerability scanning powered by Sonatype Nexus Lifecycle.
Product overview
Tomitribe provides enterprise-grade supported versions of three Apache open-source projects: Apache TomEE (a JavaEE/Jakarta EE application server built on Tomcat), Apache Tomcat (servlet container), and Apache ActiveMQ Classic (message broker). The core offering combines binary distributions with support subscriptions across three tiers (Bronze/Silver/Gold), differentiated by core count allocation and service levels. CVE Patching services and the Community Partnership Program are add-on offerings that provide vulnerability management and rewards for enterprise customers. Binary-only subscriptions are available for specific vendor platforms including Oracle Insurance Policy Administration Suite, OpenText products (AppWorks, Process Suite, Web Experience Management), and Dassault Systemes products (SIMULIA Isight, 3DEXPERIENCE, ENOVIA), as well as Progress OpenEdge. Tomcat 9 EOL Support provides extended security coverage beyond the community end-of-life date.
Differentiator
Problem solved
Functional benefit
Products and services
- Apache TomEE Support Enterprise support subscription for Apache TomEE, a lightweight JavaEE/JakartaEE application server built on Apache Tomcat. Includes 24/7 support from Apache committers, CVE patching, feature development, training, and professional services.
- Apache Tomcat Support Enterprise support subscription for Apache Tomcat, the open-source Java servlet container implementing Java Servlet, JavaServer Pages, Java Expression Language and WebSocket technologies. Includes CVE patching and security updates.
- Apache ActiveMQ Classic Support Enterprise support subscription for Apache ActiveMQ Classic, an open-source Java message broker with full Java Message Service (JMS) client support.
- CVE Patching Service CVE scanning, notification, and patching service for Tomcat, TomEE, and ActiveMQ. Includes 365-day vulnerability scanning powered by Sonatype Nexus Lifecycle, impact analysis, patch development and backporting, and validated binary delivery with deployment guidance.
- Tomcat 9 EOL Support Extended commercial SLA-backed security support for Apache Tomcat 9 after its end-of-life date. Includes CVE fixes, proactive monitoring, and minimum 5 years of post-EOL coverage delivered by Apache committers.
- Tomitribe Community Partnership Program Rewards-based program providing enterprise subscribers with complementary professional services, training days, feature development days, and additional core discounts, scaling with subscription tier (Bronze/Silver/Gold).
- TomEE Binary Subscription Download-only subscription providing commercially licensed, CVE-patched TomEE binaries with 8-year commercial lifecycle and unlimited cores. Available for specific vendor platforms: Oracle Insurance Policy Administration Suite, OpenText AppWorks Platform, OpenText Process Suite Platform, OpenText Web Experience Management, Dassault Systèmes SIMULIA Isight, and Dassault Systèmes 3DEXPERIENCE Platform. Priced at $612/month with 12-month minimum term.
- Tomcat Binary Subscription Download-only subscription providing commercially licensed, CVE-patched Tomcat binaries with 8-year commercial lifecycle and unlimited cores. Available for specific vendor platforms: Dassault Systèmes ENOVIA and Progress OpenEdge. Priced at $612/month with 12-month minimum term.
- Enterprise Support Subscription (Bronze/Silver/Gold) Three-tiered annual subscription (Bronze up to 64 cores, Silver up to 120 cores, Gold up to 248 cores) covering TomEE, Tomcat, and ActiveMQ. Includes 24/7 support with 1-hour Severity 1 response SLA, unlimited incidents, CVE patching, professional services days, training days, and feature development days. Quote-based pricing.
Quantifiable outcome
- Patched over 120 CVEs on Apache Tomcat, TomEE & ActiveMQ in the last 3 years
- +2 more outcomes
Companies that use Tomitribe
Customer profileNamed customers5 records
Segments3 records
Ideal customer profiles3 records
Tomitribe technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration1 record
Feature4 records
Tomitribe partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered core and minor.
- SonatypecoreTomitribe partners with Sonatype, integrating Sonatype Nexus Lifecycle to power its CVE scanning and vulnerability management workflow. The partnership enables automated scanning of customer-deployed Tomcat, TomEE, and ActiveMQ versions against Sonatype's vulnerability database. A joint case study ('Tomitribe & Nexus Lifecycle: Champions of Open Source Security') is published. Tomitribe is recognized as a Sonatype partner in the open source security ecosystem.
- OpenTextminorTomitribe offers binary subscriptions for Apache TomEE tailored for OpenText platforms: OpenText AppWorks Platform, OpenText Process Suite Platform, and OpenText Web Experience Management. These are commercially licensed TomEE builds for internal use by OpenText software users, sold at $612/month per platform.
- OracleminorTomitribe offers a binary subscription for Apache TomEE tailored for Oracle Insurance Policy Administration Suite. This is a commercially licensed TomEE build for internal use by Oracle IPA Suite users, sold at $612/month, including CVE patches, warranty, and unlimited cores.
- Dassault SystèmesminorTomitribe offers binary subscriptions for Apache TomEE (Dassault Systèmes SIMULIA Isight, Dassault Systèmes 3DEXPERIENCE Platform) and Apache Tomcat (Dassault Systèmes ENOVIA). These are commercially licensed builds for internal use by Dassault Systèmes product users, sold at $612/month per platform.
- ProgressminorTomitribe offers a binary subscription for Apache Tomcat tailored for Progress OpenEdge. This is a commercially licensed Tomcat build for internal use by Progress OpenEdge users, sold at $612/month.
- Eclipse Foundation (Jakarta EE / MicroProfile)coreTomitribe is an active participant in the Eclipse Foundation's Jakarta EE and MicroProfile initiatives. The Apache Software Foundation joined the Jakarta EE Working Group as a Guest Member, with Tomitribe committers serving on expert groups, contributing specifications (e.g., JMS 3.0), and participating in TCK testing for Jakarta EE and MicroProfile certifications.
Scale indicators4 records
Recent moves6 records
Expansion highlights5 records
Tomitribe competitors and assessment
Company assessmentDirect peers
- OpenLogic (Perforce): OpenLogic, now part of Perforce, provides commercial open source support and security patching for hundreds of OSS components including Tomcat. It is a direct competitor in the OSS subscription/support category targeting the same enterprise buyers with similar SLA-backed support offerings.
- Tidelift: Tidelift offers a managed open source subscription service that combines vetted packages, security monitoring, and SLA-backed support, with a network of maintainers providing remediation. It directly competes with Tomitribe on the proposition of paid, supported open source for enterprises and overlaps on the Tomcat ecosystem.
- HeroDevs: HeroDevs provides post-EOL and never-EOL support for open source software, including Spring and other Java ecosystem projects. It is a direct competitor specifically in the EOL extension category that Tomitribe monetizes for Tomcat 9.
Broad incumbents
- Red Hat (Middleware/JBoss): Red Hat provides commercial support for open source Java middleware (JBoss EAP/WildFly) and is a broad incumbent in the same enterprise Java support category. It does not directly support Apache Tomcat/TomEE but competes for the same middleware support budget and represents the established alternative.
- Snyk: Snyk is a broad open source security and developer security platform that addresses vulnerability scanning, license compliance, and remediation across many ecosystems. It is adjacent in the open source security workflow and competes indirectly for the same enterprise security budget.
- Synopsys Black Duck: Black Duck provides open source security and license compliance scanning for enterprise software supply chains. It competes with Tomitribe's CVE scanning and vulnerability management layer and serves the same enterprise security and compliance buyer.
- IBM (WebSphere / Java support): IBM historically provided WebSphere and broader Java middleware support and remains a broad incumbent in enterprise Java. It is an indirect competitor for the same regulated-industry Java infrastructure budget, with founder David Blevins having a former IBM background.
Emerging players
- Sonatype: Sonatype is both a partner (powers Tomitribe's CVE scanning via Nexus Lifecycle) and an adjacent competitor through Nexus Lifecycle, which provides open source security and component management. It overlaps with Tomitribe on the vulnerability management layer of the open source support stack.
- BellSoft: BellSoft provides commercial support for OpenJDK distributions (Liberica JDK) and Java server runtimes, serving a similar regulated-enterprise buyer with SLA-backed Java runtime support. It is adjacent rather than a direct Tomcat/TomEE competitor but competes for Java infrastructure budgets.
- Azul: Azul provides commercial support for OpenJDK (Zulu) and a high-performance JVM (Zing). It targets the same enterprise Java buyers with paid runtime support and overlaps with Tomitribe's value proposition of commercially supported open source Java infrastructure.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Tomitribe social profiles
Digital presenceTomitribe financial estimates
Financial estimateRevenue estimate
Valuation estimate
Tomitribe leadership team
Management profileNumber of profiles
Profiles2 records
Tomitribe funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Tomitribe M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Tomitribe
What does Tomitribe do?
Tomitribe provides enterprise-grade, commercially supported builds of Apache open-source software — Apache TomEE (JavaEE/JakartaEE application server), Apache Tomcat (Java servlet container), and Apache ActiveMQ (Java message broker). Its core offering combines CVE-patched binary subscriptions with tiered enterprise support subscriptions (Bronze/Silver/Gold), delivered by Apache Project Committers who author the upstream code. The company also offers an End-of-Life (EOL) support extension program and proactive vulnerability scanning powered by Sonatype Nexus Lifecycle.
Is Tomitribe a public or private company?
Tomitribe is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Tomitribe founded?
Tomitribe was founded in 2013. It employs 11 to 50 people.
Where is Tomitribe based?
Tomitribe is headquartered in Santa Monica, United States, in the North America region.
How does Tomitribe make money?
Three revenue lines are on record. Binary Subscription is the primary driver. The others are enterprise Support Subscription and professional Services (within Enterprise Subscription).
Who are Tomitribe's main competitors?
Direct peers on record are OpenLogic (Perforce), Tidelift and HeroDevs. Broad incumbents are Red Hat (Middleware/JBoss), Snyk, Synopsys Black Duck and IBM (WebSphere / Java support). Emerging players are Sonatype, BellSoft and Azul.
Does Tomitribe have an API?
No public API is recorded for Tomitribe.
What industry is Tomitribe in?
Tomitribe's product category is Enterprise Open Source Middleware Support. Its primary akta.pro industry code is BPAEAFAE, Cloud-Native Application Development (Containers/Kubernetes/Serverless), with a secondary code of BPAMAOAE, Webhooks, Eventing & Message Streaming. Its NAICS code is 51821 and its SIC code is 7370.