diff --git a/pyproject.toml b/pyproject.toml
index eda8d03..c20c524 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -91,7 +91,7 @@ exclude = '''
 
 [tool.bandit]
 targets = ['app_metrics']
-exclude_dirs = ["app_metrics/tests"]
+exclude_dirs = ["app_metrics/tests", "demo_app"]
 skips = ["B310", "B101"]