A system and method for providing Java Server Page (JSP) security are provided. In one embodiment, a method for providing JSP security comprises selecting a JSP file at least partially in response to a request by a user. The request includes information identifying the user. A security tag associated with at least a portion of the JSP file is located for the selected JSP file. Authorization of the user to access the portion of the JSP file is determined based on the security tag. At least one web page is generated based, at least in part, on the determination.