Perplexity open sources SPACE agent sandbox platform

SPACE isolates AI agent tasks in Firecracker microVMs with external credential and outbound traffic controls under the Apache 2.0 license.

Provides root access inside guest VMs for running commands while enforcing egress network policy externally via a gateway
Supports stateful agent execution by pausing, forking, and snapshotting memory and disk across restarts
Withstood 108 VM escape attempts across nine frontier model configurations with root access during security evaluations

Developers building autonomous agent systems can deploy a tested, open-source microVM sandbox to safely isolate untrusted code execution.

Sources