Helmet only deals with HTTP headers, but there are a number of other helpful security modules for Express. We haven’t heavily audited these—that’s what the Node Security Project is for—but take a look at some of these modules!

This module also exists in other environments. Some are direct ports where others are similar modules.