Doug,
Yes...I have looked at WASP in addition to AXIS. I haven't done a lot of comparative analysis, but I think it is fair to say that, as a commercial product, WASP is further along; particularly in the area of Web Services Security. Another Java toolkit you may want to look at is GLUE (www.themindelectric.com); in terms of ease of use and performance it is a very strong product. Of course AXIS is a great toolkit as well :-). Good luck, harris