diff --git a/changelogs/unreleased/10256-Lyndon-Li b/changelogs/unreleased/10256-Lyndon-Li
new file mode 100644
index 000000000..c9fdb5779
--- /dev/null
+++ b/changelogs/unreleased/10256-Lyndon-Li
@@ -0,0 +1 @@
+Clarify the security context to Velero server
\ No newline at end of file
diff --git a/pkg/install/deployment.go b/pkg/install/deployment.go
index 6bea8b0be..d1b751ca1 100644
--- a/pkg/install/deployment.go
+++ b/pkg/install/deployment.go
@@ -444,6 +444,15 @@ func Deployment(namespace string, opts ...podTemplateOption) *appsv1api.Deployme
 								},
 							},
 							Resources: c.resources,
+							SecurityContext: &corev1api.SecurityContext{
+								Capabilities: &corev1api.Capabilities{
+									Drop: []corev1api.Capability{"ALL"},
+								},
+								AllowPrivilegeEscalation: ptr.To(false),
+								SeccompProfile: &corev1api.SeccompProfile{
+									Type: corev1api.SeccompProfileTypeRuntimeDefault,
+								},
+							},
 						},
 					},
 					Volumes: []corev1api.Volume{