diff --git a/security/authelia/docker-compose.yml b/security/authelia/docker-compose.yml
index a535c5b..df6bae0 100644
--- a/security/authelia/docker-compose.yml
+++ b/security/authelia/docker-compose.yml
@@ -27,7 +27,9 @@ services:
     security_opt:
       - no-new-privileges:true
     healthcheck:
-      test: ["CMD", "authelia", "helper", "health-check"]
+      # authelia 4.39.x removed the "helper health-check" subcommand;
+      # use the /api/health endpoint via the image-provided wget instead.
+      test: ["CMD-SHELL", "wget -q --spider http://localhost:9091/api/health || exit 1"]
       interval: 30s
       timeout: 5s
       retries: 5
diff --git a/security/vaultwarden/docker-compose.yml b/security/vaultwarden/docker-compose.yml
index 94dbc3b..f19127b 100644
--- a/security/vaultwarden/docker-compose.yml
+++ b/security/vaultwarden/docker-compose.yml
@@ -25,7 +25,8 @@ services:
       - no-new-privileges:true
 
     healthcheck:
-      test: ["CMD-SHELL", "wget -q --spider http://localhost:80/alive || exit 1"]
+      # vaultwarden image ships curl, not wget
+      test: ["CMD-SHELL", "curl -fsS http://localhost:80/alive || exit 1"]
       interval: 30s
       timeout: 5s
       retries: 5