A platform comprising: a plurality of hardware components including one or more of a sensor, a network interface, a memory, an input output, IO, component and a processor; a browser interface to detect a browser request for web content; and a security module to: determine a first set of interaction information corresponding to an interaction between the web content and the plurality of hardware components accessed by the web content in response to the browser request; determine a second set of interaction information from remote data sources that provide historical data on the behaviour of the same web content on other platforms; and generate a risk profile based on the first and second sets of interaction information to document a risk associated with the access by the web content to any hardware component of the plurality of hardware components, wherein the risk profile is to include an identity of a hardware component of the plurality of hardware components accessed by the web content in response to the browser request and an identity of a function call corresponding to an application associated with the web content that accessed the hardware component. a plurality of hardware components including one or more of a sensor, a network interface, a memory, an input output, IO, component and a processor; a browser interface to detect a browser request for web content; and a security module to: determine a first set of interaction information corresponding to an interaction between the web content and the plurality of hardware components accessed by the web content in response to the browser request; determine a second set of interaction information from remote data sources that provide historical data on the behaviour of the same web content on other platforms; and generate a risk profile based on the first and second sets of interaction information to document a risk associated with the access by the web content to any hardware component of the plurality of hardware components, wherein the risk profile is to include an identity of a hardware component of the plurality of hardware components accessed by the web content in response to the browser request and an identity of a function call corresponding to an application associated with the web content that accessed the hardware component. determine a first set of interaction information corresponding to an interaction between the web content and the plurality of hardware components accessed by the web content in response to the browser request; determine a second set of interaction information from remote data sources that provide historical data on the behaviour of the same web content on other platforms; and generate a risk profile based on the first and second sets of interaction information to document a risk associated with the access by the web content to any hardware component of the plurality of hardware components, wherein the risk profile is to include an identity of a hardware component of the plurality of hardware components accessed by the web content in response to the browser request and an identity of a function call corresponding to an application associated with the web content that accessed the hardware component.