I am looking for these too. Looking for solutions to disable web security from being deployed / pushed to client's machine when they use AnyConnect.
Can you remove the AnyConnect Web Security components from the Add or Remove Programs or the Programs And Features user interface? If not, what value did you set up for "HIDE_UNINSTALL" in AnyConnect Installation script.
Please refer to the following guide for more details.
For those on a mac, check under /opt/cisco/anyconnect/bin/plugins/ for 2 dylibs starting with the name libacwebsec. Delete these and web security will no longer show up in the anyconnect app.