diff --git a/tests/Drivers/ZB.MOM.WW.OtOpcUa.Driver.OpcUaClient.IntegrationTests/Docker/nat/docker-compose.yml b/tests/Drivers/ZB.MOM.WW.OtOpcUa.Driver.OpcUaClient.IntegrationTests/Docker/nat/docker-compose.yml
index aff9bca04..ccb40f66b 100644
--- a/tests/Drivers/ZB.MOM.WW.OtOpcUa.Driver.OpcUaClient.IntegrationTests/Docker/nat/docker-compose.yml
+++ b/tests/Drivers/ZB.MOM.WW.OtOpcUa.Driver.OpcUaClient.IntegrationTests/Docker/nat/docker-compose.yml
@@ -41,7 +41,9 @@ services:
       #       this server's cert) is deliberately not automatic — that is what the secure test pins.
       - "--aa"
     healthcheck:
-      test: ["CMD-SHELL", "netstat -an | grep -q ':50000.*LISTEN' || exit 1"]
+      # The image ships no netstat (the sibling ../docker-compose.yml healthcheck is permanently "unhealthy" for that
+      # reason); bash's /dev/tcp is there.
+      test: ["CMD", "bash", "-c", "exec 3<>/dev/tcp/127.0.0.1/50000"]
       interval: 5s
       timeout: 2s
       retries: 10