The recently increasing adopting of XML as base technology for web application, increasing the need to make its security available and understandable. At present, it can be observed that weakness of security of web application may be because developers are lack of security knowledge and the security is not considered as a primary function. Patterns plainly capture the experience from experts in a structured way. Thus, a trial is made to apply the pattern approach to the XML security context, presenting a security patterns language in XML security context. The pattern language has three abstraction levels. Its form based on the user’s level of understanding of the security and XML security fields.