web security capabilities