Helmet only deals with HTTP headers, but there are a number of other helpful security modules for Express. As a disclaimer, Helmet's maintainers have not heavily audited these modules!

This module also exists in other environments. Some are direct ports where others are similar modules.

There are also other modules like Helmet for Node if you don't like us: