Computer services, namely, for providing a managed security service (MSS) that is cloud-based for delivery involving the integration of active threat and breach detection intelligence as part of the overall solution. It is provided to the market in a Security-as-a-Service (Saas) delivery model ready made for the evolving trend to protect web applications and web transactions. It includes a managed web application firewall (WAF), real-time security event monitoring, 24x7x365 operation, incident handling and response, expert tuning and configuration management, continuous policy and prevention updates. The cWatch SaaS model is fit-to-purpose for companies / organizations of any size including small and medium size businesses and public (government) organizations at State / Local / Education (SLED). cWatch is further instantiated in the market as cWatch Web for the technology and services as already described and as cWatch Network for an additional set of technologies and services required by larger or more critical (as in critical infrastructure) enterprises (private and public). These services include (1) more specific correlation of threat intelligence to industry verticals (example, health, energy, transportation) or to specific companies / organizations, (2) incident response / crisis management, (3) malware analysis, (4) attribution, (5) adjudication of trust for Internet domains and for files (web and file filtering), (6) alerting, operating system / configuration monitoring, (7) heuristics, (8) containerization / sandboxing, (9) patch / inventory (aka asset) / SSL management, (10) log collection / correlation, (11) signature updates, (12) cyber incident case management, (13) mobile device management, (14) cyber incident evidence control, and (15) activities associated with a security operations center (SOC)