diff --git a/src/main/java/rife/bld/extension/kotlin/JvmOptions.java b/src/main/java/rife/bld/extension/kotlin/JvmOptions.java
index 4c46989..926c6e7 100644
--- a/src/main/java/rife/bld/extension/kotlin/JvmOptions.java
+++ b/src/main/java/rife/bld/extension/kotlin/JvmOptions.java
@@ -31,18 +31,19 @@ import java.util.List;
  */
 @SuppressWarnings("PMD.LooseCoupling")
 public class JvmOptions extends ArrayList<String> {
-    @Serial
-    private static final long serialVersionUID = 1L;
-
     /**
      * Keyword to enable native access for all code on the class path.
      */
     public final static String ALL_UNNAMED = "ALL-UNNAMED";
 
+    @Serial
+    private static final long serialVersionUID = 1L;
+
     /**
      * Modules that are permitted to perform restricted native operations.
      * The module name can also be {@link #ALL_UNNAMED}.
      *
+     * @param modules the module names
      * @return this list of options
      */
     public JvmOptions enableNativeAccess(String... modules) {
@@ -53,10 +54,37 @@ public class JvmOptions extends ArrayList<String> {
      * Modules that are permitted to perform restricted native operations.
      * The module name can also be {@link #ALL_UNNAMED}.
      *
+     * @param modules the module names
      * @return this list of options
      */
     public JvmOptions enableNativeAccess(Collection<String> modules) {
         add("--enable-native-access=" + StringUtils.join(modules, ","));
         return this;
     }
+
+    /**
+     * Controls what action the Java runtime takes when native access is not enabled for a module.
+     *
+     * @param access the access mode
+     * @return this list of options
+     */
+    public JvmOptions illegalNativeAccess(NativeAccess access) {
+        add("--illegal-native-access=" + access.mode);
+        return this;
+    }
+
+    /**
+     * Illegal native access modes.
+     */
+    public enum NativeAccess {
+        ALLOW("allow"),
+        DENY("deny"),
+        WARN("warn");
+
+        public final String mode;
+
+        NativeAccess(String mode) {
+            this.mode = mode;
+        }
+    }
 }
diff --git a/src/test/java/rife/bld/extension/kotlin/JvmOptionsTest.java b/src/test/java/rife/bld/extension/kotlin/JvmOptionsTest.java
index eb2d59a..0dcfbef 100644
--- a/src/test/java/rife/bld/extension/kotlin/JvmOptionsTest.java
+++ b/src/test/java/rife/bld/extension/kotlin/JvmOptionsTest.java
@@ -27,7 +27,8 @@ class JvmOptionsTest {
     @Test
     void testCompileOptions() {
         var compileOptions = new CompileOptions().jvmOptions(new JvmOptions().enableNativeAccess(JvmOptions.ALL_UNNAMED));
-        assertThat(compileOptions.jvmOptions()).as(JvmOptions.ALL_UNNAMED).containsExactly("--enable-native-access=ALL-UNNAMED");
+        assertThat(compileOptions.jvmOptions()).as(JvmOptions.ALL_UNNAMED)
+                .containsExactly("--enable-native-access=ALL-UNNAMED");
         assertThat(compileOptions.args()).as("args()").containsExactly("-J--enable-native-access=ALL-UNNAMED");
 
         compileOptions = new CompileOptions().jvmOptions(new JvmOptions().enableNativeAccess("m1", "m2"));
@@ -40,10 +41,25 @@ class JvmOptionsTest {
         var options = new JvmOptions().enableNativeAccess(JvmOptions.ALL_UNNAMED);
         assertThat(options).as(JvmOptions.ALL_UNNAMED).containsExactly("--enable-native-access=ALL-UNNAMED");
 
+        options = new JvmOptions().enableNativeAccess("m1");
+        assertThat(options).as("m1").containsExactly("--enable-native-access=m1");
+
         options = new JvmOptions().enableNativeAccess("m1", "m2");
         assertThat(options).as("m1,m2").containsExactly("--enable-native-access=m1,m2");
     }
 
+    @Test
+    void testIllegalNativeAccess() {
+        var options = new JvmOptions().illegalNativeAccess(JvmOptions.NativeAccess.ALLOW);
+        assertThat(options).as("ALLOW").containsExactly("--illegal-native-access=allow");
+
+        options = new JvmOptions().illegalNativeAccess(JvmOptions.NativeAccess.DENY);
+        assertThat(options).as("DENY").containsExactly("--illegal-native-access=deny");
+
+        options = new JvmOptions().illegalNativeAccess(JvmOptions.NativeAccess.WARN);
+        assertThat(options).as("WARN").containsExactly("--illegal-native-access=warn");
+    }
+
     @Test
     void testJvmOptions() {
         var compileOptions = new CompileOptions().jvmOptions("option1", "option2");
@@ -59,5 +75,13 @@ class JvmOptionsTest {
                 .containsExactly("option1", "option2", "--enable-native-access=ALL-UNNAMED");
         assertThat(compileOptions.args()).as("args(option1,option2,ALL_UNNAMED)")
                 .containsExactly("-Joption1", "-Joption2", "-J--enable-native-access=ALL-UNNAMED");
+
+        compileOptions = compileOptions.jvmOptions(new JvmOptions().illegalNativeAccess(JvmOptions.NativeAccess.ALLOW));
+        assertThat(compileOptions.jvmOptions()).as("allow")
+                .containsExactly("option1", "option2", "--enable-native-access=ALL-UNNAMED",
+                        "--illegal-native-access=allow");
+        assertThat(compileOptions.args()).as("args(option1,option2,ALL_UNNAMED,allow)")
+                .containsExactly("-Joption1", "-Joption2", "-J--enable-native-access=ALL-UNNAMED",
+                        "-J--illegal-native-access=allow");
     }
 }