# WS-Security Web Services Security - WS-Security / WSS - is a [SOAP](/glossary/s/soap) extension protocol for adding security to web services by adding security tokens, for example [SAML](/glossary/x/x509)), [Kerberos](/glossary/k/kerberos), and [X.509](/glossary/x/x509). For more information see [oasis documentation](http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=wss)