diff --git a/helm/flowforge/values.yaml b/helm/flowforge/values.yaml
index d98ce972..19b2893d 100644
--- a/helm/flowforge/values.yaml
+++ b/helm/flowforge/values.yaml
@@ -97,6 +97,9 @@ forge:
   containerSecurityContext:
     allowPrivilegeEscalation: false
     readOnlyRootFilesystem: true
+    capabilities:
+      drop:
+        - ALL
 
   livenessProbe:
     initialDelaySeconds: 10