You can use [VPC Service Controls](https://docs.cloud.google.com/vpc-service-controls/docs/overview) to improve
the security of your Secure Web Proxy instance.

VPC Service Controls provides additional security for
Secure Web Proxy to help mitigate the risk of data exfiltration.
By using VPC Service Controls, you can add projects to service perimeters
that protect resources and services from requests that originate outside
the perimeter.

To learn how to create a service perimeter, see [Create a service perimeter](https://docs.cloud.google.com/vpc-service-controls/docs/create-service-perimeters) in the VPC Service Controls documentation.

You can include the following APIs in your service perimeter:

| API name | API identifier | Requirement |
|---|---|---|
| [Network Services API](https://docs.cloud.google.com/secure-web-proxy/docs/reference/network-services/rest) | `networkservices.googleapis.com` | `Required` |
| [Network Security API](https://docs.cloud.google.com/secure-web-proxy/docs/reference/network-security/rest) | `networksecurity.googleapis.com` | `Required` |
| [Certificate Manager API](https://docs.cloud.google.com/certificate-manager/docs/reference/certificate-manager/rest) | `certificatemanager.googleapis.com` | `Optional` If you provision your proxy with a [certificate](https://docs.cloud.google.com/certificate-manager/docs/certificates), then you must also include this API in your service perimeter. |
| [Certificate Authority Service API](https://docs.cloud.google.com/certificate-authority-service/docs/reference/rest) | `privateca.googleapis.com` | `Optional` If you [enable TLS inspection](https://docs.cloud.google.com/secure-web-proxy/docs/enable-tls-inspection) for your proxy, then you must also include this API in your service perimeter. |
| [Compute Engine API](https://docs.cloud.google.com/compute/docs/reference/rest/v1) | `compute.googleapis.com` | `Optional` If your Secure Web Proxy configuration interacts with Compute Engine resources across your service perimeter, then you must include this API. |

## What's next

- [Learn how to enable Secure Web Proxy with VPC Service Controls](https://docs.cloud.google.com/vpc-service-controls/docs/supported-products#table_swp)