diff --git a/deploy/deploy.yaml b/deploy/deploy.yaml
index 30d6669..2ff2e46 100644
--- a/deploy/deploy.yaml
+++ b/deploy/deploy.yaml
@@ -39,4 +39,9 @@ spec:
               cpu: 10m
               memory: 50Mi
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - all
+            privileged: false
             readOnlyRootFilesystem: true