1. A method for protecting a computer, comprising: receiving, at a protection device, content destined for a computer, wherein the content is configured to access a function of the computer, and wherein the content is received from a server, and wherein the content comprises a call to the function; adding, at the protection device, a protection to the content corresponding to the function, wherein the protection is configured to observe the function and wherein adding the protection further comprises: determining a computing environment associated with the computer; identifying a first protection corresponding with the computing environment; and adding the first protection to the content; transmitting the content and the protection to the computer; and executing the protection in response to the call to the function, wherein executing the protection comprises determining whether an argument the content passed into the function represent a threat to the computer.