Abstract: A network computer system for providing security that includes a monitoring function for the network computer system utilizing compartments that can be logical or separate physical hardware, at least one outside server for an untrusted computer network, e.g., global computer system, at least one proxy server, at least one inside server, wherein the at least one outside server is able to read and write software code to the at least one proxy server and the at least one proxy server is able to read and write software code to the at least one inside server, wherein the monitoring function can read and execute software code from the at least one outside server, the at least one proxy server and the at least one inside server. There is a top/down security function to prevent access to higher compartments.