Secure web gateway (SWG) solutions protect web surfing devices by filtering unwanted software/malware from user-initiated web traffic. They also enforce regulatory compliance and company human resource policies that restrict access to prohibited sites; for example, gambling sites and sites with adult content. At a minimum, an SWG should include URL filtering (e.g. web reputation), malicious code detection and filtering, and application controls for popular web-based applications, such as instant messaging (IM) and Skype, and the ability to inspect SSL/TLS traffic. Increasingly, native or integrated data loss prevention is also included. This methodology describes how NSS will evaluate SWG products to provide an objective and fair assessment of the technology.