diff --git a/deployment.yaml b/deployment.yaml
index 0f389fa..65eb28a 100644
--- a/deployment.yaml
+++ b/deployment.yaml
@@ -19,8 +19,7 @@ spec:
         - name: web
           image: corp/web:latest # VULN 5: mutable :latest tag, no digest pinning
           securityContext:
-            # VULN 1: privileged container — full access to host devices/kernel
-            privileged: true
+            privileged: false
             # VULN 2: runs as root and permits privilege escalation
             runAsUser: 0
             allowPrivilegeEscalation: true