diff --git a/dd-java-agent/agent-tooling/src/main/java/datadog/trace/agent/tooling/muzzle/ReferenceMatcher.java b/dd-java-agent/agent-tooling/src/main/java/datadog/trace/agent/tooling/muzzle/ReferenceMatcher.java
index 5f9636e6fb..d16556c9f6 100644
--- a/dd-java-agent/agent-tooling/src/main/java/datadog/trace/agent/tooling/muzzle/ReferenceMatcher.java
+++ b/dd-java-agent/agent-tooling/src/main/java/datadog/trace/agent/tooling/muzzle/ReferenceMatcher.java
@@ -22,7 +22,7 @@ import net.bytebuddy.pool.TypePool;
 
 /** Matches a set of references against a classloader. */
 @Slf4j
-public class ReferenceMatcher implements WeakMap.ValueSupplier<ClassLoader, Boolean> {
+public final class ReferenceMatcher implements WeakMap.ValueSupplier<ClassLoader, Boolean> {
   private final WeakMap<ClassLoader, Boolean> mismatchCache = newWeakMap();
   private final Reference[] references;
   private final Set<String> helperClassNames;
@@ -99,7 +99,7 @@ public class ReferenceMatcher implements WeakMap.ValueSupplier<ClassLoader, Bool
    * @param loader
    * @return A list of mismatched sources. A list of size 0 means the reference matches the class.
    */
-  public static List<Reference.Mismatch> checkMatch(
+  private static List<Reference.Mismatch> checkMatch(
       final Reference reference, final ClassLoader loader) {
     final TypePool typePool =
         AgentTooling.poolStrategy()