PhonePe/mantis

Health v2 · maintenance only

Adoption not part of the score

1039 stars · 134 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Mantis is a command-line security framework that automates asset discovery, reconnaissance, and vulnerability scanning for given top-level domains. It chains open-source and custom tools to find subdomains, certificates, open ports, technologies, secrets, misconfigurations, and phishing domains, storing results in MongoDB with dashboard and alerting support.

Use cases

• automate subdomain discovery and recon for my domains
• scan for exposed secrets and misconfigurations across assets
• attack surface monitoring for my company's domains
• run distributed vulnerability scans across multiple machines
• find phishing domains impersonating my brand
• bug bounty recon automation

When to choose

• you want an end-to-end automated discovery, recon, and scanning pipeline for domains
• you need distributed scanning, alerting, and a MongoDB-backed dashboard out of the box
• you are a product security team or bug bounty hunter wanting customizable recon workflows

When to avoid

• you need a lightweight single-purpose scanner rather than a CPU-intensive multi-tool framework
• you cannot run a dedicated VM or manage MongoDB and AppSmith dependencies
• you lack authorization to scan the target domains

Facets

framework · maturity active

security osint vulnerability-scanning cli monitoring alerting security penetration-testing developer-tools cli python attack-surface-management recon bug-bounty subdomain-discovery secrets-scanning phishing-detection distributed-scanning automation linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="PhonePe/mantis")