lightweight authentication/authorization express middleware

Express middleware that implements a security.txt path and policy

ESLint plugin for Express.js security — detects permissive CORS, missing CSRF protection, missing helmet headers, insecure cookies, and GraphQL introspection in production.

Express security-headers middleware — a thin helmet wrapper with API-friendly defaults.

Standard Express.js middleware for implementing organizational security policies including CSP, HSTS, and X-Content-Type-Options.

Fast, unopinionated, minimalist web framework

express security

A middleware used to secure express services

[](https://travis-ci.org/gergelyke/express-security.txt)

GraphQL IDE for better development workflows (GraphQL Subscriptions, interactive docs & collaboration).

help secure Express/Connect apps with various HTTP headers

A collection of express security middlewares

Fast and low overhead web framework, for Node.js

GuOx: Ultimate enterprise‑grade, AI & WASM‑powered Express security framework

Simple express file upload middleware that wraps around Busboy

An unopinionated OpenAPI framework for express

Content-Security-Policy middleware for Express

Express security middleware with headers, rate limiting, threat detection, request validation, and security auditing.

Create a security plugin for node.js

See the official documentation [here](https://edocs.humansecurity.com/docs/installation-node-express)