As valuable as the Internet is to business today, it can also bring harm through deliberate attacks or inadvertent risks. Businesses must be proactive in protecting corporate networks, mitigating risks and helping to eliminate threats. This paper analyzes common threats to Web security and evaluates three types of security controls: desktop-based tools, server- or gateway-level applications and managed security services.