Hi Anil/Stefan, I'll be commenting more in details on this soon (need to take a look more in details at CXF). Regarding of JBossWS-Native, perhaps you'd need to refer to the latest tag: http://anonsvn.jboss.org/repos/jbossws/stack/native/tags/jbossws-native-3... The ws-security processing basically occurs starting from a handler running before jaxws user handlers for incoming messages and after them for outcoming ones. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4228520#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...