Key Info

Perplexity has open sourced SPACE under the Apache 2.0 license, a sandbox platform that runs every task in Perplexity Computer. It gives each agent task its own Firecracker microVM and controls credentials and outbound traffic from outside the VM.

Highlights

  • SPACE is available now under Apache 2.0.
  • Each agent task runs in a dedicated Firecracker microVM.
  • Credentials and outbound traffic are controlled from outside the VM.
  • In security testing, nine model configurations with root inside the VM made 108 escape attempts, and none reached the host.
  • SPACE is the first component of Perplexity's Agentic Runtime Platform, open sourced to raise the security bar for agentic products.