Web-based threats are increasing in number and severity. The consequences of becoming infected can be extensive and cause significant damage to an organization's revenue, employee productivity, reputation and long-term survival. Organizations should adopt a multi-layered Web defense strategy that can protect their users and networks from increasingly sophisticated threats. Key elements of this strategy include community-watch monitoring of Web traffic using a cloud-based service, protection of remote clients, and real-time inputs from Web gateways and clients for background analysis to detect malware, rate reputations and analyze Web content.