Helmet only deals with HTTP headers, but there are a number of other helpful security modules for Express. We haven’t heavily audited these—that’s what the Node Security Project is for—but take a look at some of these modules!

This module also exists in other environments. Some are direct ports where others are similar modules.

There are also other modules like Helmet for Node if you don’t like us: