See also

Helmet only deals with HTTP headers, but there are a number of other helpful security modules for Express. We haven’t heavily audited these—that’s what the Node Security Project is for—but take a look at some of these modules!

• cors
• express-content-length-validator
• express-enforces-ssl
• hpp
• lusca

This module also exists in other environments. Some are direct ports where others are similar modules.

• Crystal: crystal-helmet
• Flask (Python framework): Talisman
• Go: secure
• Koa (Node framework): koa-helmet
• Ring (Clojure framework): ring-secure-headers