Skip to content


See also

Helmet only deals with HTTP headers, but there are a number of other helpful security modules for Express. As a disclaimer, Helmet’s maintainers have not heavily audited these modules!

This module also exists in other environments. Some are direct ports where others are similar modules.

There are also other modules like Helmet for Node if you don’t like us:

And finally, if you would rather not use Helmet, see this guide which shows how to accomplish what Helmet does without installing anything new.