diff --git a/docs/platforms/oracle.md b/docs/platforms/oracle.md
index 142c9de33..d8006754b 100644
--- a/docs/platforms/oracle.md
+++ b/docs/platforms/oracle.md
@@ -140,7 +140,7 @@ tailscale serve status
 curl http://localhost:18789
 ```
 
-## 9) Lock Down VCN Security
+## 8) Lock Down VCN Security
 
 Now that everything is working, lock down the VCN to block all traffic except Tailscale. OCI's Virtual Cloud Network acts as a firewall at the network edge — traffic is blocked before it reaches your instance.