Seraph is a very simple, pluggable J2EE web application security framework. It is developed and maintained primarily by Atlassian, who use it in their products:
