Perplexity open sources SPACE to enhance security for agentic products
Summary
Perplexity has announced the open-source release of SPACE, a sandbox platform designed for running code in isolated Firecracker microVMs. This platform allows applications to create Linux environments, execute commands, and manage the lifecycle of sandboxes securely. It is available under the Apache 2.0 license and includes a GitHub repository with comprehensive documentation and setup guides for both local and Kubernetes deployments. SPACE aims to raise the security standards for agentic products, showcasing its effectiveness by thwarting 108 escape attempts during testing, ensuring that the host remains secure from unauthorized access.
Analysis
SPACE: SPACE (Sandboxed Platform for Agentic Code Execution) is a sandbox platform that runs agent and user code in isolated Firecracker microVMs with controlled credentials and egress. Perplexity is open sourcing it to support long-running, stateful agent workloads that can pause, fork, and resume via snapshots. The platform exposes an HTTP API for lifecycle management and is designed to raise the security bar for agentic applications. Perplexity: Perplexity is an AI company focused on conversational search and agentic systems. In this news, it is open sourcing SPACE as the foundational component of its Agentic Runtime Platform to improve security standards across agentic products. The effort includes releasing the codebase under Apache 2.0 along with documentation and research on sandbox escape resistance. Firecracker microVM: Firecracker is an open-source virtualization technology that provides lightweight, secure microVMs for running isolated workloads. The news describes its use in SPACE to give each agent task a dedicated microVM while keeping the host outside the guest's control and enforcing per-sandbox egress policies. Open Source Release: Perplexity has made SPACE available under the Apache 2.0 license with accompanying GitHub repository, documentation, and setup guides for local and Kubernetes deployments.
Categories
techai_agentsvirtuals