WS-Security is a flexible and feature-rich extension to SOAP to apply security to web services.
It is a member of the WS-* family of web service specifications and was published by OASIS.
[1] Closely related to WS-Security is WS-Trust, also a WS-* specification and OASIS standard that provides extensions to WS-Security.