diff --git a/braintrust/ci/values-aws.yaml b/braintrust/ci/values-aws.yaml
index 6dc4d7b..b61b644 100644
--- a/braintrust/ci/values-aws.yaml
+++ b/braintrust/ci/values-aws.yaml
@@ -35,7 +35,7 @@ api:
     limits:
       cpu: "4"
       memory: "8Gi"
-  allowCodeFunctionExecution: true
+  allowCodeFunctionExecution: false
   backfillDisableHistorical: false
   backfillDisableNonhistorical: false
   allowInvalidBase64: false
diff --git a/braintrust/ci/values-azure.yaml b/braintrust/ci/values-azure.yaml
index 2be4bc8..dc822d7 100644
--- a/braintrust/ci/values-azure.yaml
+++ b/braintrust/ci/values-azure.yaml
@@ -42,7 +42,7 @@ api:
     limits:
       cpu: "4"
       memory: "8Gi"
-  allowCodeFunctionExecution: true
+  allowCodeFunctionExecution: false
   backfillDisableHistorical: false
   backfillDisableNonhistorical: false
   allowInvalidBase64: false
diff --git a/braintrust/ci/values-google.yaml b/braintrust/ci/values-google.yaml
index 23f5b83..22c2127 100644
--- a/braintrust/ci/values-google.yaml
+++ b/braintrust/ci/values-google.yaml
@@ -37,7 +37,7 @@ api:
     limits:
       cpu: "4"
       memory: "8Gi"
-  allowCodeFunctionExecution: true
+  allowCodeFunctionExecution: false
   backfillDisableHistorical: false
   backfillDisableNonhistorical: false
   allowInvalidBase64: false
diff --git a/braintrust/ci/values-minimal.yaml b/braintrust/ci/values-minimal.yaml
index f765e52..cac2cdf 100644
--- a/braintrust/ci/values-minimal.yaml
+++ b/braintrust/ci/values-minimal.yaml
@@ -28,7 +28,7 @@ api:
     limits:
       cpu: "4"
       memory: "8Gi"
-  allowCodeFunctionExecution: true
+  allowCodeFunctionExecution: false
   backfillDisableHistorical: false
   backfillDisableNonhistorical: false
   allowInvalidBase64: false
diff --git a/braintrust/tests/__fixtures__/base-values.yaml b/braintrust/tests/__fixtures__/base-values.yaml
index c7fcb07..d603711 100644
--- a/braintrust/tests/__fixtures__/base-values.yaml
+++ b/braintrust/tests/__fixtures__/base-values.yaml
@@ -38,7 +38,7 @@ api:
     limits:
       cpu: "4"
       memory: "8Gi"
-  allowCodeFunctionExecution: true
+  allowCodeFunctionExecution: false
   backfillDisableHistorical: false
   backfillDisableNonhistorical: false
   allowInvalidBase64: false
diff --git a/braintrust/values.yaml b/braintrust/values.yaml
index 22d2c37..d35d6af 100644
--- a/braintrust/values.yaml
+++ b/braintrust/values.yaml
@@ -117,7 +117,7 @@ api:
       cpu: "4"
       memory: "8Gi"
   # Allow running user generated code functions (e.g. scorers/tools)
-  allowCodeFunctionExecution: true
+  allowCodeFunctionExecution: false
   # Brainstore backfill configuration. These defaults are fine for most cases.
   backfillDisableHistorical: false
   backfillDisableNonhistorical: false