LibreAI / Agents IA / mantis
// agents · google/mantis

mantis

mantis est un projet de agents IA open source, créé par google (google/mantis sur GitHub). Il compte 2 380 étoiles sur GitHub et 201 forks, il est publié sous la licence Apache-2.0 et a été mis à jour pour la dernière fois sur GitHub le 7 octobre 2026.

Google's modular toolkit that lets AI coding agents hunt, reproduce, and patch vulnerabilities autonomously.

★ 2,4 k étoiles⑂ 201 forksApache-2.0mis à jour oct. 2026
▦ visuel — le README de ce projet ne contient aucune capture intégrable,
voici donc un emplacement réservé. Le guide ci-dessous est complet malgré tout.
// détails du projet

Détails du projet

Étoiles GitHub
2 380
Forks
201
Licence
Apache-2.0
Dernière mise à jour sur GitHub
7 octobre 2026
Catégorie
Agents IA
Type de fiche
Guide d'installation complet
Site officiel
Official site
// fonctionnement

Comment ça marche

  1. Clarify your goal

    Decide which codebase or file you want reviewed, and prepare an isolated, restricted environment with no production access, as the README strongly requires.

  2. Get the project

    Clone the repository and move into the reference harness directory.

  3. Install and configure

    Run the install script, authenticate Google Cloud Application Default Credentials if you use Vertex AI, then let the configuration tool auto-detect capabilities or use its interactive wizard.

  4. Run your first task

    Run the preflight validation, then launch a review campaign against a file or repository, optionally focusing it with a plain-language hint.

// fonctionnalités

Pourquoi on l'adore

Threat modelling and code indexing

Mantis reviews codebase history for past vulnerabilities, builds a semantic index or summaries for navigation, and generates a threat model before scanning.

Hypothesis-driven agent research

Individual agents research hypotheses or scan files systematically, then deduplicate the findings they produce.

Triage and calibration against hallucination

Findings are critiqued, statically checked for production viability, and calibrated with a rubric so severity is not inflated.

Reproduction attempts

Suspected vulnerabilities are reproduced at whatever depth the environment allows, from a reasoned exploit sketch to a unit test or a mock server.

Adversarial patch verification

Mantis drafts patches and uses an adversarial loop to check the vulnerability is genuinely fixed.

Custom research graphs and focus hints

You can steer a run with --focus, remove spend limits for long unattended runs with parallel workers, or have it design a new agent-graph topology from an objective.

Advertisement
// lancez-le

Lancez-le vous-même

  1. Clone and install the reference harness

    Install the venv tooling first if needed, then run the bundled installer.

    git clone https://github.com/google/mantis.git
    cd mantis/reference && ./install.sh
  2. Configure and validate

    Authenticate ADC for Vertex AI, auto-configure, and run the fast preflight plus reachability probe.

    gcloud auth application-default login
    python3 scripts/configure.py --auto
    python3 scripts/configure.py --test --probe
  3. Launch a review campaign

    Point run.sh at a file or repository, optionally with a focus hint.

    ./run.sh path/to/code
    ./run.sh path/to/code --focus "look for IDOR"
// cas d'usage

Ce que vous pouvez créer

Advertisement
// faq

Questions fréquentes

Who maintains it?

It is developed by Google and published under the google GitHub organisation, though the README notes it is not an officially supported Google product.

Is it free to use?

Yes, the code is Apache-2.0 licensed and free to use and adapt. Running it still costs whatever the underlying AI models charge.

Does it need a paid API key?

In practice yes: the reference harness is built around Google Cloud and Gemini/Vertex AI access, so you need Google Cloud credentials (ADC) and you pay for model usage, with budget controls in the tool.

How does it compare to a well-known alternative?

Traditional SAST tools like CodeQL or Semgrep match deterministic rules; Mantis uses agents to form hypotheses, attempt reproductions, and draft patches, so it explores behaviour rules cannot express, but its findings need human verification.

How do I get started?

Clone the repo, run reference/install.sh, configure with scripts/configure.py --auto, pass the preflight probe, then run ./run.sh on a target in an isolated environment.

// continuez l'exploration

Outils similaires

Agents IA

vocode-core

Build voice-based LLM agents with a modular, open-source toolkit.

★ 3,8 k étoilesMIT
Voir le guide →
Agents IA

adk-python

Google's code-first toolkit for building real AI agents.

★ 21,7 k étoilesApache-2.0
Voir le guide →
Agents IA

adk-js

Google's code-first TypeScript toolkit for building AI agents.

★ 1,4 k étoilesApache-2.0
Voir le guide →
Agents IA

chrome-devtools-mcp

Chrome DevTools for coding agents: an MCP server that lets agents debug and inspect real Chrome

★ 53,1 k étoilesApache-2.0
Voir le guide →
Agents IA

nodeterm

Manage parallel AI coding agents on an infinite tmux-backed canvas.

★ 1,9 k étoilesNOASSERTION
Voir le guide →
Agents IA

babysitter

Babysitter enforces the process: deterministic, quality-gated orchestration for fleets of coding agents.

★ 1,8 k étoilesMIT
Voir le guide →
// alternatives

Alternatives en Agents IA

Les autres projets de la catégorie Agents IA avec le plus d'étoiles du catalogue LibreAI — la sélection réaliste d'alternatives si mantis ne vous convient pas.

// plus en agents

Plus en Agents IA

Projets de la catégorie Agents IA proches dans le catalogue, les plus proches en étoiles de mantis — continuez à explorer de part et d'autre.

Obtenir mantis

Gratuit et ouvert : récupérez le code source, mettez une étoile au dépôt et commencez à créer.