Methods, computer-readable media and devices are disclosed for storing content from an endpoint device in a network cache. For example, a processor receives a security policy for the endpoint device defining a type of content for storing in the network cache, and determines that traffic from the endpoint device includes content of the content type for storing in the network cache. When it is determined that the traffic includes the content of the content type for storing in the network cache, the processor instantiates the network cache, stores the content in the network cache, and sends a notification to a designated device. The notification includes at least one parameter associated with the content. The processor further receives a decision from the designated device and performs a task regarding the content in response to the decision.