There are some 36 member companies of the WS-Security security specification of which I expect a number to come out with products in the Web services security space. In addition, we have had about 15 companies participating in the WS-Security interoperability tests. So it can be said that, at a minimum, these companies will have products in this space.
At this time, the major products that are available and support WS-Security are WebSphere from IBM and the .NET extension from Microsoft. Both of these implementations are "developer kits" and are not yet fully supported as a product. In addition, for the most part, they support the original version of the spec. released by IBM, Microsoft and VeriSign. Also, Sun has a developer kit available for download that supports many of the Web services models.
This was first published in January 2004