diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 23ca7b5..8cc18b0 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -31,12 +31,12 @@ repos:
       - id: no-print-statements
         files: ^src/
   - repo: https://github.com/psf/black  # black formatter
-    rev: 23.12.0
+    rev: 23.11.0
     hooks:
       - id: black
         files: ^src/
   - repo: https://github.com/PyCQA/isort  # isort sort imports
-    rev: 5.13.2
+    rev: 5.13.0
     hooks:
       - id: isort
         files: ^src/
@@ -45,12 +45,20 @@ repos:
     hooks:
       - id: flake8
         files: ^src/
-  - repo: https://github.com/nbQA-dev/nbQA  # generalised notebook QA
-    rev: 1.7.1
+  - repo: https://github.com/pycqa/bandit  # basic security checks for python code
+    rev: 1.7.6
     hooks:
-      # - id: nbqa-black  # not yet
-      - id: nbqa-isort
-        additional_dependencies: [isort==5.10.1]
+      - id: bandit
+        files: ^src/
+        args: ["--config", "pyproject.toml"]
+        additional_dependencies: ["bandit[toml]"]
+  - repo: https://github.com/econchick/interrogate  # check for docstrings
+    rev: 1.5.0
+    hooks:
+      - id: interrogate
+        files: ^src/
+        args: [--config, pyproject.toml]
+        pass_filenames: false  # see https://github.com/econchick/interrogate/issues/60#issuecomment-1180262851
   - repo: https://gitlab.com/iam-cms/pre-commit-hooks  # apply Apache2 header
     rev: v0.4.0
     hooks: