diff --git a/tox.ini b/tox.ini
index b7a4749..81b227b 100644
--- a/tox.ini
+++ b/tox.ini
@@ -33,6 +33,7 @@ commands =
   bash -c {toxinidir}/tools/gate/whitespace-linter.sh
   yapf -dr {toxinidir}/spyglass {toxinidir}/setup.py
   flake8 {toxinidir}/spyglass
+  bandit -r spyglass -n 5
 whitelist_externals =
   bash