Overview
CAP Console is an enterprise solution composition environment for rapidly creating, prototyping and deploying customised digital solutions to run on TomorrowX Programmable Data Agents. Using pre engineered, security and performance tested components, it enables organisations to assemble solution logic, user experiences and operational workflows faster while reusing proven building blocks. This helps reduce delivery effort, shorten development cycles and accelerate deployment across web and multi protocol environments.
Built for enterprise and public sector organisations operating in highly regulated, secure and air gapped environments, CAP Console supports rapid solution creation without invasive change to existing systems, major redevelopment or forced migration. Teams can prototype with agility, validate ideas earlier and move proven designs into production with greater confidence in security, performance and operational fit. The platform is well suited to legacy system extension, secure digital service delivery, cyber uplift, operational modernisation and AI ready solution creation.
The Enterprise Edition includes TomorrowX full library of plug and play functional and programming components, giving teams a repeatable foundation for composing production ready solutions at speed. By combining reusable enterprise grade components with deployment on Programmable Data Agents, CAP Console helps organisations deliver secure, scalable and adaptable solutions closer to where systems, controls and operational requirements already exist. This creates a practical path to faster innovation, better governance and more efficient delivery across complex environments.
Highlights
- Pre-engineered, enterprise-ready components for rapidly building secure digital solutions in highly regulated environments.
- Reduce delivery effort, increase agility and accelerate deployment without invasive system change, large-scale redevelopment or forced modernisation.
- Support web and multi-protocol solution creation with reusable components designed for security, performance and production confidence.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Cost/hour |
|---|---|
t3.large Recommended | $35.675 |
t3a.medium | $35.675 |
t3.medium | $35.675 |
m5.xlarge | $35.675 |
t3a.xlarge | $35.675 |
t3a.large | $35.675 |
m6i.large | $35.675 |
t3.xlarge | $35.675 |
m6i.xlarge | $35.675 |
m5.large | $35.675 |
Vendor refund policy
Please contact TomorrowX for refund & policy https://tomorrowx.dev/get-help/
Refer to the AWS Marketplace Buyer Guide for further details regarding:
- Free trials for AMI-based products https://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-free-trials.html
- Subscribing to an AMI private offer https://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-private-offers-subscribing-ami-private-offer.html
- Cancel your AMI subscription https://docs.aws.amazon.com/marketplace/
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
This release delivers the Composable Agentic Platform (CAP) Console 12.0.0 (B30000) on Red Hat Enterprise Linux 10.1 (Coughlan) - TomorrowX's first major Console modernization release since V11, mirroring the V12 update shipped to the CAP Container product on AWS Marketplace.
Platform upgrades:
- Embedded Jetty 12 on Jakarta EE 11 - Upgraded the standalone Console runtime from Jetty 9.4 (javax.servlet) to Jetty 12.1.8 (jakarta.servlet) - the current Long-Term-Support generation of the Eclipse Jetty server
- Jakarta EE 11 namespace migration - Console, Core, and all production extensions migrated from javax.* to jakarta.* APIs across servlet, mail, activation, and JSP layers
- Virtual threads (Project Loom, JDK 21) - Internal request-handling and protocol-receiver thread pools replaced with virtual threads; the legacy PooledExecutor (Doug Lea, 1998) and ad-hoc synchronized blocks have been retired in favour of ReentrantLock and virtual-thread executors
- TCP/UDP protocol receivers on virtual threads - Multi-Protocol PDA listeners (DNS, ISO 8583, custom TCP/UDP) now dispatch each connection on a virtual thread, removing the historical fixed-pool ceiling under load
- Pruned Jetty distribution - Unused Jetty environments (ee8, ee9, ee10) and demo webapps removed, reducing the AMI footprint while retaining strategic toggles for OIDC, HTTP/2, JMX, and rewrite
New features:
- Refreshed CycloneDX SBOMs - Console, Core, and RulesBaseFactory each ship a machine-readable Software Bill of Materials, regenerated against the V12 dependency tree for supply-chain transparency
- AWS SDK v2 consolidation - Console now uses the AWS SDK v2 url-connection-client transport across EC2, ECS, and ELBv2 service modules, eliminating the legacy Apache HttpClient 4.x dependency chain
- AI-ready ruleset XML (formatted) - Ruleset files are written in clean, multi-line, human-and-AI-readable XML, optimising both diff review and AI-assisted authoring; agent push and Performance.xml writers also emit the new format
- Content-Type parity with Jetty 12 - ContentTypeUtil delegates to Jetty 12 MimeTypes with a parity shim covering eight MIME types Jetty no longer ships out of the box
- Threading UI simplified - Agent threading configuration collapsed to a single field aligned with virtual-thread semantics
- AMI built via EC2 Image Builder - Reproducible, auditable AMI builds triggered from GitHub Actions OIDC, the same pipeline pattern used by the CAP Container product
Security fixes:
- CodeQL critical findings cleared - All workspace-wide CodeQL CRITICAL alerts resolved (XXE, LDAP injection, tainted-cast, unsafe-eval) ahead of GA
- Path-injection sweep across Console request handlers - 25+ upload/copy/process handlers hardened with ConsolePath / SafePath wrappers; CopyTestData JS sinks escaped against tainted-input rendering
- Vendored Dojo legacy code retired - Unused vendored Dojo widget tree removed from the Console, eliminating a large class of dormant high-severity findings
- Dependency hygiene - Zero open Dependabot alerts at release; legacy commons-httpclient 3.1 dropped from the BOM; tomcat-jasper bumped 11.0.0 -> 11.0.22; log4j-api pinned to 2.25.4 with log4j-to-slf4j bridge
- Workspace security posture - Remaining OS-layer Trivy mediums are upstream-pending and tracked in the security posture report
Bug fixes & improvements:
- Multi-Protocol receivers under Jetty 12 - POST body now flows end-to-end through the BIP (RulesBase IntegrationPoint) layer under the new server
- Async request handling - Removed pre-emptive startAsync() that blocked the Jetty 12 async state machine in proxy paths
- Refined Marketplace base image - AMI keeps the RHEL 10.1 (Coughlan) + JDK 21 LTS baseline, systemd cap-console service, first-boot cap-init credential initialisation, and pre-installed AWS Systems Manager agent introduced in V11 - now rebuilt against the V12 distribution
- Sharper packaging - Distribution ZIP and uncompressed AMI footprint trimmed via Jetty environment pruning while retaining all production-required modules
- Continued credential-encryption rollout - Phase 2 (SecureRandom + username field encryption) is in production; encryption envelope and key handling tracked for the V12.x roadmap
For full documentation see: https://docs.tomorrowx.com
Additional details
Usage instructions
As with all new programming languages, the Hello, World! program generally is a computer program that outputs or displays the message Hello, World. Such a program is very simple in most programming languages and is often used to illustrate the basic syntax of a programming language. It is often the first program written by people learning to code.
Now step inside and follow these steps to complete your very first composition with the Composable Agentic Platform by TomorrowX. https://docs.tomorrowx.com/cap/guides/hello-world
IMPORTANT: Please read the docs - Essential things to do first In order to manage the default accounts, and change passwords. https://docs.tomorrowx.com/cap/product-reference/getting-started/essential-things-to-do-first
First time users can launch the console at http://{Instance IP/DNS}/console e.g. http://12.34.56.78/console User ID: ec2-user Password: {instance-id}
Further information can be found in the dedicated AWS User Deployment Guide. https://docs.tomorrowx.com/cap/product-reference/installation-and-configuration/aws-user-deployment-guide
Resources
Vendor resources
Support
Vendor support
Support is delivered through partners, with TomorrowX providing platform support and specialist advisory capability where applicable. Support levels scale by license tier and are confirmed during onboarding. The customer retains control of infrastructure and networking within their AWS environment. For platform support requests, please visit: - https://tomorrowx.dev/get-help/
Watch: How to launch on AWS Marketplace (3m:20s)
https://player.vimeo.com/video/726599460?h=c6cd92b504
Red Hat Enterprise Linux on Amazon EC2 FAQs https://aws.amazon.com/partners/redhat/faqs/ .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products


