Detection is half the job. MANTIS360 also tells you what to fix first, proves you're meeting your obligations, and lets you propagate policy across thousands of hosts with a single click.
📊
Insights
Prioritised remediation feed ranked by likely impact — KEV-listed CVEs first, then critical findings, identity gaps, out-of-compliance hosts. At-a-glance counter cards for assets without an agent, hosts failing posture audits, stale check-ins, and never-audited agents.
- Severity-bucketed recommendation cards
- Stat strip: out-of-compliance, no-agent, never-audited
- Click-through to drill into the underlying view
📈
Trends
10 years of daily snapshots per tenant and per site — risk score, asset count, agent online/offline, finding counts by severity, KEV count, missing KBs. Show your CISO the line going down. Charts re-scope automatically when you change site selection.
- 11 metrics tracked daily, retained indefinitely
- 30d / 90d / 1yr / 5yr / 10yr ranges
- Per-site rollup matches the topbar site selector
📋
Compliance Audit
Maps tenant signals (vuln findings, identity findings, posture, MFA enforcement) to control checklists across nine frameworks. Per-control evidence and remediation guidance — usable as a starting point for an audit binder, not a finished one.
- NIST CSF 2.0 · CIS Controls v8 · CMMC L2 · FedRAMP
- NIST 800-53 · ISO 27001 · HIPAA · PCI DSS · GDPR
- Satisfied / partial / unsatisfied / manual review per control
✅
Risk Assessment
Guided self-assessment against NIST CSF 2.0 and CIS Controls v8. Scope to specific sites, walk every subcategory answering Yes / Partial / No / N/A, then generate a scored HTML report. Completed assessments are archived in R2 — downloadable as JSON or HTML.
- Per-function maturity scoring with gap-by-gap recommendations
- NIST CSF 2.0 (six functions) + CIS Controls v8 L1+L2
- Auto-archive to R2 with HTML + JSON export
⚙️
Agent & Site Policies
Bundle agent runtime settings (checkin cadence, inventory cadence, collection toggles) and posture baselines into named policies that resolve down a hierarchy: agent override → site default → tenant default. Attach STIG bundles to a parent site once; every descendant inherits.
- Per-policy cadence + collection toggles + auto-update
- STIG / CIS bundles attachable per policy or per site
- Hierarchical sites with bundle accumulation up the chain
🚀
Push Deploy
Select assets, click Deploy. Each site holds its own Windows admin service account; the deploy plan validates credentials, generates per-target install commands, and rotates the per-site enrollment token so re-deployment stays idempotent. Blocked rows tell you exactly which site is missing service creds.
- Per-site Windows service-account credential vault
- Deploy plan with READY / BLOCKED / ERROR status
- Permanent per-site install token (UI rotates on demand)
