A tool that provides security features such as digital signature, encryption, and access control for XML documents. These features are beyond the capability of transport-level security protocols such as Secure Sockets Layer (SSL)