Web Services Security logopeterindia.net
Knowledge Hub

Web Services and API Security: Web Resources and Links

Resources on securing web services and APIs — SOAP, REST, OAuth, CSP and TLS.

24 topics•3 categories•Updated November 2026

SOAP & Web Services

1 entry

Classic web services security.

01OASIS Web Services Security (WSS)WS-Security standard.

REST APIs, Web & Transport

8 entries

Modern API and web security.

02OWASP REST Security Cheat SheetOWASP guidance for REST APIs. 03OAuth 2.0Authorization framework. 04Content Security Policy (MDN)Browser policy against injection. 05MDN Web SecurityWeb security guide. 06TLS 1.3 (RFC 8446)Transport layer security. 07Let's EncryptFree, automated certificate authority for TLS. 08MDN HTTP ObservatoryScans a site's HTTP security headers and gives improvement guidance. 09WebAuthn GuideIntroduction to passkeys and the Web Authentication API.

More Web Services Security Standards

10 entries

Specifications for securing web services and APIs.

10OpenID ConnectIdentity layer on OAuth 2.0. 11JSON Web Token (RFC 7519)JWT standard. 12OWASP API Security Top 10Top API risks. 13OAuth 2.0 Security Best Current Practice (RFC 9700)Current security recommendations for OAuth 2.0. 14OAuth 2.1Consolidation of OAuth 2.0 best practices into one specification. 15JWT Best Current Practices (RFC 8725)Guidance for secure use of JSON Web Tokens. 16OWASP Top 10Most critical web application security risks. 17OWASP ASVSApplication Security Verification Standard for web applications and services. 18OWASP Web Security Testing GuideMethodology for testing web applications and services. 19OWASP Top 10 for LLM ApplicationsCritical risks for applications built on large language models.

Related Pages

5 entries

Neighbouring pages on this site.

20API Security SoftwareAPI security products. 21Web Application FirewallsWAF products. 22XML SecurityXML security. 23Service-Oriented ArchitectureSOA hub. 24IT SecurityIT security hub.

Frequently Asked Questions

What is web services security?

Protecting SOAP and REST services through authentication, authorization, message integrity and transport encryption.

What are the top API risks?

Broken authorization, weak authentication and excessive data exposure; see the OWASP API Security Top 10 and REST cheat sheet.

Which standards matter?

WS-Security for SOAP, OAuth 2.0 and OpenID Connect for REST, and TLS everywhere.

What replaced the older entries?

Older tutorials and vendor FAQs (Guru99, IBM WebSphere, RestCase, HubSpot and an Adobe Commerce guide) were removed on 11 November 2026, and current standards, OWASP projects and tools were added.

How are web services secured?

With transport security (TLS), message-level security such as WS-Security for SOAP, token-based authorisation with OAuth 2.0 and OpenID Connect, and signed JWTs.