diff --git a/v1/providers/nebius/capabilities.go b/v1/providers/nebius/capabilities.go
index b03eaf4..660ad3e 100644
--- a/v1/providers/nebius/capabilities.go
+++ b/v1/providers/nebius/capabilities.go
@@ -21,7 +21,6 @@ func getNebiusCapabilities() v1.Capabilities {
 		v1.CapabilityResizeInstanceVolume,    // Nebius volume resizing
 
 		// Resource Management
-		v1.CapabilityModifyFirewall,    // Nebius has Security Groups for firewall management
 		v1.CapabilityMachineImage,      // Nebius supports custom machine images
 		v1.CapabilityTags,              // Nebius supports resource tagging
 		v1.CapabilityInstanceUserData,  // Nebius supports user data in instance creation
diff --git a/v1/providers/nebius/client_test.go b/v1/providers/nebius/client_test.go
index 29d0344..a809856 100644
--- a/v1/providers/nebius/client_test.go
+++ b/v1/providers/nebius/client_test.go
@@ -94,7 +94,6 @@ func TestNebiusCredential_GetCapabilities(t *testing.T) {
 		v1.CapabilityRebootInstance,
 		v1.CapabilityStopStartInstance,
 		v1.CapabilityResizeInstanceVolume,
-		v1.CapabilityModifyFirewall,
 		v1.CapabilityMachineImage,
 		v1.CapabilityTags,
 		v1.CapabilityInstanceUserData,
@@ -221,7 +220,6 @@ func TestNebiusClient_GetCapabilities(t *testing.T) {
 		v1.CapabilityRebootInstance,
 		v1.CapabilityStopStartInstance,
 		v1.CapabilityResizeInstanceVolume,
-		v1.CapabilityModifyFirewall,
 		v1.CapabilityMachineImage,
 		v1.CapabilityTags,
 		v1.CapabilityInstanceUserData,