Specific type of application that provides security services or security management capabilities at application level rather than embedded in the communication architecture.