diff --git a/helm/flowforge/values.yaml b/helm/flowforge/values.yaml
index d8772b21..42fa82fb 100644
--- a/helm/flowforge/values.yaml
+++ b/helm/flowforge/values.yaml
@@ -95,6 +95,9 @@ forge:
   containerSecurityContext:
     allowPrivilegeEscalation: false
     readOnlyRootFilesystem: true
+    capabilities:
+      drop:
+        - ALL
 
   livenessProbe:
     initialDelaySeconds: 10