I'm fairly new to Tomcat having only developed a couple small web apps using version 4. In addition, I only ran these apps locally. It was really just to get me familiar with the process. In the future, however, I'm looking at developing a web app for a local nonprofit. I'm considering using Tomcat, but what to make sure I set up a secure app.