diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
index 47b21c0d929e..1c0849c07d3b 100644
--- a/.github/pull_request_template.md
+++ b/.github/pull_request_template.md
@@ -5,5 +5,6 @@ If some of the following don't apply, delete the relevant line.
 - [ ] Changes file added (for user-visible changes)
 - [ ] Documented any API changes (docs/Using-Fleet/REST-API.md)
 - [ ] Documented any permissions changes
+- [ ] Ensured that input data is properly validated, SQL injection is prevented (using placeholders for values in statements)
 - [ ] Added/updated tests
 - [ ] Manual QA for all new/changed functionality