SWG.

A Secure Web Gateway (SWG) is a proxy — on-prem or cloud — that inspects user web traffic, enforces acceptable-use policy, and blocks malware, phishing, and data exfiltration. It belongs to the Network Security category of cybersecurity.

A Secure Web Gateway (SWG) is a proxy — on-prem or cloud — that inspects user web traffic, enforces acceptable-use policy, and blocks malware, phishing, and data exfiltration.

A Secure Web Gateway sits in line with user-to-internet traffic, terminates TLS, and inspects HTTP and HTTPS requests against URL categorization, content filtering, malware scanning, and DLP policies. Modern cloud SWGs are delivered as part of SSE/SASE platforms and combine reputation feeds, advanced threat protection (sandboxing, isolation), and identity-aware policy. They replace legacy on-prem proxies for remote and hybrid workforces and provide visibility into shadow IT, suspicious downloads, and unauthorized SaaS use. SWGs are typically paired with CASB for SaaS-specific controls and ZTNA for private app access, sharing one policy plane.

Defences for SWG typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: Secure Web Gateway, Web proxy.