A method includes instantiating a first web application for a first application owner on a virtual machine and instantiating a second web application for a second application owner. The second application owner is different than the first application owner. Instantiating the second web application includes determining that the second web application is associated with an attribute. The first web application is also associated with the attribute, and the attribute comprises an implementation related property of the first web application and the second web application. Instantiating the second web application also includes identifying the virtual machine as configured to host web applications having the attribute, responsive to identifying the virtual machine, instantiating the second web application on the virtual machine hosting the first web application. The second web application is prevented from accessing the first web application and the first web application is prevented from accessing the second web application.