Is it possible to secure a web service to only respond to local requests over HTTP? Yes, you just need to make sure that you listen at http://127.0.0.1/MyService/ with HostNameComparisonMode = Exact. ServiceHost service = new ServiceHost( typeof (MyService),