Bot developers should ensure their code follows standard secure coding practices, including Bot Logic and C# code written for DLLs.

The following list of security checks are generally applicable and relevant for bot creation.

These checks correspond to specific software vulnerabilities identified by the Open Web Application Security Project (OWASP), a not-for-profit organization focused on improving the security of software. Each of the following OWASP issues correspond to specific items included in the Common Weakness Enumeration (CWE), a list of software security vulnerabilities which can occur in software development as provided by MITRE, a nonprofit research and development group.

Developers must consider additional secure coding practices in accordance with the internal security policies of their environments.