Addressing the challenges of web app cyberattacks means combining isolation-based protection with detection-based response, right from the start.