diff --git a/pkg/ruler/ruleset.go b/pkg/ruler/ruleset.go
index aaf29e70a..8044e8f04 100644
--- a/pkg/ruler/ruleset.go
+++ b/pkg/ruler/ruleset.go
@@ -63,7 +63,7 @@ func NewRuleset(logger *zap.SugaredLogger, ruleIDs ...string) (*Ruleset, error)
 			Selector:  "containers[] .securityContext .readOnlyRootFilesystem == true",
 			Reason:    "An immutable root filesystem can prevent malicious binaries being added to PATH and increase attack cost",
 			Kinds:     []string{"Pod", "Deployment", "StatefulSet", "DaemonSet"},
-			Points:    1,
+			Points:    3,
 			Advise:    3,
 		},
 		{
diff --git a/pkg/ruler/ruleset_test.go b/pkg/ruler/ruleset_test.go
index 2f3554fb7..4194766ba 100644
--- a/pkg/ruler/ruleset_test.go
+++ b/pkg/ruler/ruleset_test.go
@@ -191,8 +191,8 @@ spec:
 
 			report := reports[0]
 
-			if report.Score != 2 {
-				t.Errorf("Got score: %d, expected: 2", report.Score)
+			if report.Score != 4 {
+				t.Errorf("Got score: %d, expected: 4", report.Score)
 			}
 
 		})