As far as I know, SOAP services have security standards recognized by OASIS and W3C, such as:

  • XML-Encryption
  • XML-Signature
  • SAML

Are there any security standards for RESTful services?

  • 1
    Depends on whose recommendations you'd want to adhere to, but yes, even NSA has some (PDF). There's even such chapters as Guidance for using HEAD and Consideration for use of SOAP :D
    – TildalWave
    Mar 24, 2014 at 0:22

2 Answers 2


OWASP has some very good guidelines concerning the security of REST services.


In addition to the mentioned documents, these standards may be of your interest:

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.