A method comprising: receiving a web application at a trusted server; determining by the trusted server, if the received web application is a static web application, wherein the static web application comprises one or more objects that make up the static web application; validating by the trusted server, assurance characteristics of the received web application; and upon determining that the received web application is a static web application and upon successful validation of the assurance characteristics of the static web application, providing, by the trusted server, access to the static web application as privileged static hosted web application via a uniform resource locator, URL, that identifies the static web application at a trusted server location within a public Internet and that is accessible to navigate to the static web application from a browser running on a client device, and storing by the trusted server, the static web application in a verified applications datastore, wherein only web applications determined as static web applications and successfully validated, are stored in the verified applications datastore; wherein the static web application, when executed on the browser running on the client device, is granted at least one permission to utilize local resources of the client device during execution of the static web application by the browser; and receiving a change to an object of the one or more objects of the static web application at the trusted server, including receiving a revised static web application including the change to the object for re-validating the revised static web application; wherein upon the receiving, the method further comprises the following steps executed at the trusted server for making available the revised static web application as hosted web application: storing the revised static web application including the change to the object at a server location different from the verified applications datastore, re-validating the assurance characteristics of the revised static web application including the change to the object as a whole, and upon successful re-validation of the revised static web application including the change to the object, storing the revised static web application including the change to the object in the verified applications datastore, wherein the one or more objects of the static web application are replaced with the re-validated revised static web application as a whole, and making the change to the object accessible via the URL. receiving a web application at a trusted server; determining by the trusted server, if the received web application is a static web application, wherein the static web application comprises one or more objects that make up the static web application; validating by the trusted server, assurance characteristics of the received web application; and upon determining that the received web application is a static web application and upon successful validation of the assurance characteristics of the static web application, providing, by the trusted server, access to the static web application as privileged static hosted web application via a uniform resource locator, URL, that identifies the static web application at a trusted server location within a public Internet and that is accessible to navigate to the static web application from a browser running on a client device, and storing by the trusted server, the static web application in a verified applications datastore, wherein only web applications determined as static web applications and successfully validated, are stored in the verified applications datastore; wherein the static web application, when executed on the browser running on the client device, is granted at least one permission to utilize local resources of the client device during execution of the static web application by the browser; and receiving a change to an object of the one or more objects of the static web application at the trusted server, including receiving a revised static web application including the change to the object for re-validating the revised static web application; wherein upon the receiving, the method further comprises the following steps executed at the trusted server for making available the revised static web application as hosted web application: storing the revised static web application including the change to the object at a server location different from the verified applications datastore, re-validating the assurance characteristics of the revised static web application including the change to the object as a whole, and upon successful re-validation of the revised static web application including the change to the object, storing the revised static web application including the change to the object in the verified applications datastore, storing the revised static web application including the change to the object at a server location different from the verified applications datastore, re-validating the assurance characteristics of the revised static web application including the change to the object as a whole, and upon successful re-validation of the revised static web application including the change to the object, storing the revised static web application including the change to the object in the verified applications datastore, wherein the one or more objects of the static web application are replaced with the re-validated revised static web application as a whole, and making the change to the object accessible via the URL.