LibreAI / KI-Agenten / mantis
// agents · google/mantis

mantis

mantis ist ein Open-Source-Projekt aus der Kategorie KI-Agenten von google (google/mantis auf GitHub). Es hat 2.380 Sterne auf GitHub und 201 Forks, wird unter der Lizenz Apache-2.0 veröffentlicht und wurde zuletzt am 7. Oktober 2026 auf GitHub aktualisiert.

Google's modular toolkit that lets AI coding agents hunt, reproduce, and patch vulnerabilities autonomously.

★ 2,4 Tsd. Sterne⑂ 201 ForksApache-2.0aktualisiert Okt 2026
▦ Visual — das README dieses Projekts enthält keinen einbettbaren Screenshot,
darum hier ein Platzhalter. Die Anleitung unten ist trotzdem vollständig.
// projektdaten

Projektdaten

Repository
google/mantis
GitHub-Sterne
2.380
Forks
201
Lizenz
Apache-2.0
Zuletzt auf GitHub aktualisiert
7. Oktober 2026
Kategorie
KI-Agenten
Eintragstyp
Vollständige Installationsanleitung
Offizielle Website
Official site
// so funktioniert es

So funktioniert es

  1. Clarify your goal

    Decide which codebase or file you want reviewed, and prepare an isolated, restricted environment with no production access, as the README strongly requires.

  2. Get the project

    Clone the repository and move into the reference harness directory.

  3. Install and configure

    Run the install script, authenticate Google Cloud Application Default Credentials if you use Vertex AI, then let the configuration tool auto-detect capabilities or use its interactive wizard.

  4. Run your first task

    Run the preflight validation, then launch a review campaign against a file or repository, optionally focusing it with a plain-language hint.

// funktionen

Warum es so beliebt ist

Threat modelling and code indexing

Mantis reviews codebase history for past vulnerabilities, builds a semantic index or summaries for navigation, and generates a threat model before scanning.

Hypothesis-driven agent research

Individual agents research hypotheses or scan files systematically, then deduplicate the findings they produce.

Triage and calibration against hallucination

Findings are critiqued, statically checked for production viability, and calibrated with a rubric so severity is not inflated.

Reproduction attempts

Suspected vulnerabilities are reproduced at whatever depth the environment allows, from a reasoned exploit sketch to a unit test or a mock server.

Adversarial patch verification

Mantis drafts patches and uses an adversarial loop to check the vulnerability is genuinely fixed.

Custom research graphs and focus hints

You can steer a run with --focus, remove spend limits for long unattended runs with parallel workers, or have it design a new agent-graph topology from an objective.

Advertisement
// selbst ausführen

Führe es selbst aus

  1. Clone and install the reference harness

    Install the venv tooling first if needed, then run the bundled installer.

    git clone https://github.com/google/mantis.git
    cd mantis/reference && ./install.sh
  2. Configure and validate

    Authenticate ADC for Vertex AI, auto-configure, and run the fast preflight plus reachability probe.

    gcloud auth application-default login
    python3 scripts/configure.py --auto
    python3 scripts/configure.py --test --probe
  3. Launch a review campaign

    Point run.sh at a file or repository, optionally with a focus hint.

    ./run.sh path/to/code
    ./run.sh path/to/code --focus "look for IDOR"
// anwendungsfälle

Was du damit bauen kannst

Advertisement
// häufige fragen

Häufige Fragen

Who maintains it?

It is developed by Google and published under the google GitHub organisation, though the README notes it is not an officially supported Google product.

Is it free to use?

Yes, the code is Apache-2.0 licensed and free to use and adapt. Running it still costs whatever the underlying AI models charge.

Does it need a paid API key?

In practice yes: the reference harness is built around Google Cloud and Gemini/Vertex AI access, so you need Google Cloud credentials (ADC) and you pay for model usage, with budget controls in the tool.

How does it compare to a well-known alternative?

Traditional SAST tools like CodeQL or Semgrep match deterministic rules; Mantis uses agents to form hypotheses, attempt reproductions, and draft patches, so it explores behaviour rules cannot express, but its findings need human verification.

How do I get started?

Clone the repo, run reference/install.sh, configure with scripts/configure.py --auto, pass the preflight probe, then run ./run.sh on a target in an isolated environment.

// weiter entdecken

Ähnliche Tools

KI-Agenten

vocode-core

Build voice-based LLM agents with a modular, open-source toolkit.

★ 3,8 Tsd. SterneMIT
Anleitung ansehen →
KI-Agenten

adk-python

Google's code-first toolkit for building real AI agents.

★ 21,7 Tsd. SterneApache-2.0
Anleitung ansehen →
KI-Agenten

adk-js

Google's code-first TypeScript toolkit for building AI agents.

★ 1,4 Tsd. SterneApache-2.0
Anleitung ansehen →
KI-Agenten

chrome-devtools-mcp

Chrome DevTools for coding agents: an MCP server that lets agents debug and inspect real Chrome

★ 53,1 Tsd. SterneApache-2.0
Anleitung ansehen →
KI-Agenten

nodeterm

Manage parallel AI coding agents on an infinite tmux-backed canvas.

★ 1,9 Tsd. SterneNOASSERTION
Anleitung ansehen →
KI-Agenten

babysitter

Babysitter enforces the process: deterministic, quality-gated orchestration for fleets of coding agents.

★ 1,8 Tsd. SterneMIT
Anleitung ansehen →
// alternativen

Alternativen im Bereich KI-Agenten

Die anderen Projekte der Kategorie KI-Agenten mit den meisten Sternen im LibreAI-Katalog — die realistische Auswahl, falls mantis nicht das Richtige ist.

// mehr in agents

Mehr in KI-Agenten

Verwandte Projekte der Kategorie KI-Agenten im Katalog, die mantis bei den Sternen am nächsten stehen — zum Weiterstöbern auf beiden Seiten.

Hol dir mantis

Kostenlos und offen — hol dir den Quellcode, gib dem Repository einen Stern und leg los.