diff --git a/.coveragerc b/.coveragerc
new file mode 100644
index 00000000..8b87fce8
--- /dev/null
+++ b/.coveragerc
@@ -0,0 +1,3 @@
+[report]
+include = bandit/*
+omit = bandit/tests/functional/*
diff --git a/tox.ini b/tox.ini
index 8008b6b1..065ed348 100644
--- a/tox.ini
+++ b/tox.ini
@@ -10,10 +10,10 @@ setenv =
    VIRTUAL_ENV={envdir}
 deps = -r{toxinidir}/requirements.txt
        -r{toxinidir}/test-requirements.txt
-commands = python setup.py testr --coverage --slowest --testr-args='{posargs}'
-          coverage combine
-          coverage report -m
+commands =
           coverage erase
+          python setup.py testr --coverage --slowest --testr-args='{posargs}'
+          coverage report -m
 passenv = http_proxy HTTP_PROXY https_proxy HTTPS_PROXY no_proxy NO_PROXY
 
 [testenv:debug]