Webroot has a PCMag Review -
https://www.pcmag.com/reviews/webroot-secureanywhere-antivirusPlease provide some more information ..
1) Operating system of your "server" -- what is the web software you are using ..
2) Is your railroad infrastructure on a private IP net
3) Do you allow connection to the internet -- why do you need this?
4) Are you running a firewall
5) Are you running a wireless access point
anything else you can tell us .. what is your concept of operations .. by that I mean - we run a wireless access point, anyone can log in and run trains == or we allow remote access from the internet to control trains .. etc
One other thing -- most of the model railroad software is webserver based - or specialized protocol .. your biggest "threat" is your user base screwing something up. I don't see much risk of any attack other than getting malware onto the servers .. so keep your antivirus signatures up to date, isolate you train network from the internet, and make a complete backup of your system servers .. (which you should be doing anyway)
John Berger CISSP, ISSEP, CE|H, Security+, CYSA+