CVE-free zone ahead!

Escape the log4j
Fresh Start

Your application deserves logs that don't come with a side of remote code execution. Discover battle-tested, secure, and actually enjoyable logging alternatives.

0 CVEs
in our picks
5+ Options
to choose from
100% Fun
guaranteed*

* Fun not legally binding. See vuln4j.com for the less fun details.

Pick Your New Best Friend

Each one of these loggers has been vetted for not having embarrassing security incidents. Yet.

2.9k

Logback

The reliable successor

Created by the original log4j author. It's like log4j, but with therapy and better life choices.

Java
Native SLF4J support
Automatic reloading
Graceful recovery
GitHubDocs
2.3k

SLF4J

The abstraction layer

Simple Logging Facade for Java. Pick your backend, keep your sanity. It's the dating app for loggers.

Java
Backend agnostic
MDC support
Fluent API
GitHubDocs
700+

tinylog

Lightweight champion

Just 180KB and zero dependencies. It's the minimalist's dream logger that Marie Kondo would approve.

Java/Kotlin
Zero dependencies
Lazy logging
Kotlin support
GitHubDocs
Post-CVE hardened version
3.4k

Log4j 2

The redemption arc

Yes, really. Apache learned their lesson. Now with security-first design and proper message formatting.

Java
Async logging
Plugin architecture
Lambda support
GitHubDocs
150+

JBoss Logging

Enterprise veteran

Backed by Red Hat. When your logs need to survive a corporate acquisition or two.

Java
I18n support
Backend agnostic
Annotation processor
GitHubDocs

The Showdown

Because we know you love a good feature matrix. Scroll horizontally on mobile!

FeatureLogbackSLF4JtinylogLog4j 2JBoss
Async Logging
Zero Dependencies
Kotlin Support
MDC Support
Fluent API
Hot Reload Config
Lambda Support
JSON Logging

Logback

Performancehigh
ConfigXML/Groovy
Dependenciesfew
Learningmedium
Communitylarge

SLF4J

Performancehigh
ConfigVaries
Dependenciesminimal
Learningeasy
Communityhuge

tinylog

Performancehigh
ConfigProperties
Dependencieszero
Learningeasy
Communitysmall

Log4j 2

Performancevery high
ConfigXML/JSON/YAML
Dependenciesfew
Learningmedium
Communitylarge

JBoss Logging

Performancehigh
ConfigVaries
Dependenciesminimal
Learningmedium
Communitymedium
Pro tip: When in doubt, start with SLF4J + Logback. It's the Honda Civic of logging — reliable, well-documented, and your future self will thank you.