# Perplexity open sources SPACE agent sandbox platform

SPACE isolates AI agent tasks in Firecracker microVMs with external credential and outbound traffic controls under the Apache 2.0 license.

- Provides root access inside guest VMs for running commands while enforcing egress network policy externally via a gateway
- Supports stateful agent execution by pausing, forking, and snapshotting memory and disk across restarts
- Withstood 108 VM escape attempts across nine frontier model configurations with root access during security evaluations

## Why it matters

Developers building autonomous agent systems can deploy a tested, open-source microVM sandbox to safely isolate untrusted code execution.

## Sources

- [Perplexity: Perplexity open sources SPACE agent sandbox platform](https://x.com/perplexity_ai/status/2110778478312481167)

---

Summarized by dstilled on 2026-10-15. https://dstilled.ai/story/c98644ca-096b-4607-a7bc-d8e8ba0927b1