Web-sites do require additional protection that a firewall appliance by itself cannot achieve
Having 1 to 10 employees is useful, however understanding the web-site traffic volumes is completely different.
So, making certain assumptions I would lean towards Fortinet or…