• Setup
    • Configuration
    • Headers
    • Request Size Limiter
    • Rate Limiter
    • XSS Validator
    • CORS Handler
    • Allowed Methods Restricter
    • Basic Auth
    • Cross Site Request Forgery (CSRF)
    • Hide `X-Powered-By` Header
    • Only return what is necessary
    • Use eslint security plugins
    • Use access control lists
    • Perform Application Activity Logging
    • Use Snyk
    • Lint lockfile
    • Check Awesome Node Security
    • Use Security Checklists
    • Content
    • Changelog

Check Awesome Node Security


There are many ways that you can make you app more secure and apart from OWASP and Helmet, there are sources like Awesome Node.js Security by Liran Tal.

Check it out to learn about other tools that you can use.

Edit this page on GitHub

Good Practices

Lint lockfile

Good Practices

Use Security Checklists

Powered by Docus