diff --git a/src/agents/Dockerfile b/src/agents/Dockerfile
index 558d1463..50c29007 100644
--- a/src/agents/Dockerfile
+++ b/src/agents/Dockerfile
@@ -19,6 +19,9 @@ FROM base AS production
 
 WORKDIR /app
 
+# Remove pip to reduce attack surface in production
+RUN pip uninstall -y pip
+
 ARG DOCKER_USER
 USER ${DOCKER_USER}