Helmet

frameguard

Middleware to set the X-Frame-Options header, mitigating things like clickjacking

hsts

HTTP Strict Transport Security middleware

hide-powered-by

Middleware to remove the X-Powered-By header

helmet

Help secure Express apps with various HTTP headers

csp

Content Security Policy middleware

dont-sniff-mimetype

Middleware to help prevent mimetype from being sniffed

dns-prefetch-control

middleware to set X-DNS-Prefetch-Control header

helmetjs.github.io

Website for Helmet

clearsitedata

Middleware to set the Clear-Site-Data HTTP header

feature-policy

Middleware for setting the Feature-Policy HTTP response header

nocache

Middleware to disable client-side caching

crossdomain

Set the X-Permitted-Cross-Domain-Policies header in Express apps

expect-ct

Middleware to set the Expect-CT header

referrer-policy

Middleware to set the Referrer-Policy HTTP header

eslint-config-helmet

ienoopen

Middleware for IE security. Set X-Download-Options to noopen

x-xss-protection

Middleware to set the X-XSS-Protection header

cross-origin-resource-policy

Set the Cross-Origin-Resource-Policy HTTP header

hpkp

(deprecated) HTTP Public Key Pinning (HPKP) middleware

content-security-policy-builder

Build Content Security Policy directives

content-security-policy-parser

parse content security policy directives