diff --git a/examples/chaoskube.yaml b/examples/chaoskube.yaml
index 26643b2c..8fd1d1ae 100644
--- a/examples/chaoskube.yaml
+++ b/examples/chaoskube.yaml
@@ -40,6 +40,12 @@ spec:
         - --minimum-age=1h
         # terminate pods for real: this disables dry-run mode which is on by default
         - --no-dry-run
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 65534
+          readOnlyRootFilesystem: true
+          capabilities:
+            drop: ["ALL"]
 
 ---