diff --git a/tox.ini b/tox.ini
index b1d043ea9..b8a3a6ae6 100644
--- a/tox.ini
+++ b/tox.ini
@@ -40,7 +40,7 @@ commands = {toxinidir}/setup-test-env-zmq.sh python setup.py testr --slowest --t
 
 [testenv:bandit]
 deps = -r{toxinidir}/test-requirements.txt
-commands = bandit -r oslo_messaging -n5
+commands = bandit -r oslo_messaging -x tests -n5
 
 [flake8]
 show-source = True