diff --git a/test-requirements.txt b/test-requirements.txt
index 729c3f04f..237bfa3a7 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -15,7 +15,7 @@ testscenarios>=0.4 # Apache-2.0/BSD
 WebTest>=2.0.27 # MIT
 tempest>=17.1.0 # Apache-2.0
 # Bandit security code scanner
-bandit!=1.6.0,>=1.1.0 # Apache-2.0
+bandit>=1.1.0 # Apache-2.0
 zake>=0.1.6 # Apache-2.0
 doc8>=0.6.0 # Apache-2.0
 Pygments>=2.2.0 # BSD license
diff --git a/tox.ini b/tox.ini
index 53b441cc0..f2fbdd969 100644
--- a/tox.ini
+++ b/tox.ini
@@ -88,7 +88,7 @@ commands =
 [testenv:bandit]
 basepython = python3
 deps = -r{toxinidir}/test-requirements.txt
-commands = bandit -r designate -n5 -x tests -t \
+commands = bandit -r designate -n5 -x 'designate/tests/*' -t \
   B505,B504,B503,B502,B501,B604,B605,B001,B601,B602,B701,B609,B702,\
   B608,B506,B312,B310,B411,B108,B103,B102,B309,B308,B302,B307,B306