reporting tool analyze tomcat security