DataPower's DataPower XS40 XML Security Gateway 3.1, Sarvega's Sarvega XML Guardian Gateway 3.0, and Reactivity's Reactivity XML Security Gateway and Manager 2400 are reviewed eXtensible Markup Language (XML) firewalls. All receive very good marks overall, but they vary in their protection, management, performance, pricing, and vulnerability update models. DataPower XS40 gets the best overall management marks, while Reactivitys performance was not as good as that of the other two products. All three products have excellent accuracy, but Sarvega XML Guardian Gateway 5.0 is the least expensive product, and Reactivity has the best vulnerability update model. All the products permitted testers to secure eXtensible Markup Language (XML) services against various attacks. XML Guardian Gateway configures two-way schema validation upon policy creation by default. Products from DataPower and Reactivity support schema validation, which has to be added to the policy. Testers found no latency level at all with the Guardian Gateway device. The editors choice is DataPower XS40 XML Security Gateway because it has robust performance and granular management, and could be integrated into the tested environment's infrastructure. Sarvega and DataPower provide Eclipse management tools for their devices, but testers preferred Sarvega CommandCenter over Sarvega's Web-based administration console. DataPower's Eclipse management tool is effective and as robust as its Web-based console.