Google open-sources Mantis, an AI-powered bug finding and fixing harness
Google has open-sourced Mantis, an AI-powered framework designed to automate the discovery, triage, reproduction, and patching of software vulnerabilities. This harness helps defenders leverage AI for security by combining agentic techniques with sandboxed reproduction for high true-positive rates. Mantis efficiently analyzes massive codebases by learning from repository history, building architectural documentation, and creating hierarchical security summaries that reduce token overhead by over 85%. Available on GitHub, the tool also includes a "mantis-advise" skill to help coding agents write secure code initially.
Notes (1) ›
- Google releases Mantis, an AI-powered bug finding and fixing harness
Mantis is an open-source framework from Google that automates the discovery, triage, reproduction, and patching of software vulnerabilities. It leverages AI agents and sandboxed environments to provide high true-positive rates, learning from repository history and condensing security summaries to efficiently analyze code. The tool is available on GitHub and is designed to help defenders quickly identify and remediate security flaws.
https://cloud.google.com/blog/products/identity-security/getting-started-with-the-mantis-harness-to-find-and-fix-bugs/
Related releases
- Simplify Data Pipelines with BigQuery Identity Columns Google Cloud Blog ·
- reCAPTCHA Change Fraud Defense Mobile SDK for Android Updates Detection and Performance Google Cloud release notes ·
- Agent Gateway Adds Support for Service Extensions, Now Generally Available Google Cloud release notes ·
- Vertex AI model gemini-2.5-flash-image reaches end of life in 30 days endoflife.date ·
- Cloud Run functions Go runtime 1.24 has reached end of life endoflife.date ·
- BigQuery Rust SDK Enters Public Preview Google Cloud release notes ·