diff --git a/protect/control/v1/common.proto b/protect/control/v1/common.proto
index 36ec9ab..7d5db29 100644
--- a/protect/control/v1/common.proto
+++ b/protect/control/v1/common.proto
@@ -309,6 +309,12 @@ message WorkloadSpec {
   repeated MountSpec mounts = 6;
   WorkloadSecuritySpec security = 7;
   repeated WorkloadScratchMount scratch_mount = 8;
+  repeated CgroupLimit cgroup_limits = 9;
+}
+
+message CgroupLimit {
+  string limit_name = 1;
+  string value = 2;
 }
 
 message WorkloadScratchMount {