Protection mechanisms for application service hosting platforms