Lately, XML Web Services are emerging as a dominant platform in the computing world. At the moment, the web has evolved into an active medium for providers and consumers of services. One of the major problems for XML Web Services is the related with security. The paper describes a comprehensive XML Web Services Management Architecture that supports, integrates and unifies several security models, mechanisms and technologies in a way that enable a variety of systems to securely interoperate in a platform independent, comprehensive manner.