Which are the best security practices for NodeJS?

Eradicating Brute force attacks and Preventing data leak are the best Node.js security practices. What’s your suggestions?

[i]Promotional url removed by moderator.[/i]