diff --git a/.helm/templates/deployment.yaml b/.helm/templates/deployment.yaml
index fe0592d..84a770d 100644
--- a/.helm/templates/deployment.yaml
+++ b/.helm/templates/deployment.yaml
@@ -16,9 +16,19 @@ spec:
       labels:
         app: {{ .Values.app }}
     spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 65534
+        seccompProfile:
+          type: RuntimeDefault
       containers:
         - name: {{ .Values.app }}
           image: {{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}
           ports:
             - containerPort: {{ .Values.ports.containerPort }}
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
           
\ No newline at end of file