- The general site for all WS-Security related information from the Oasis group.
- The core WS-Security 1.1 specification in pdf format.
- The Username Token Profile 1.1 specification in pdf format.
- The schema for WS-Security.
- The history of the WS-Security specification from the Oasis group.
- An implementation of the WS-Security standard by the Apache group using Java.
- Phaos is a Java implementation of WS-Security by Oracle. Specific details on their API can be found here.
- Information on the Java libraries for WS-Security provided by Sun.
- A Sun tutorial on implementing WS-Security with the Java Web Services Developer SDK 1.6.