title: "Perplexity open-sources SPACE sandbox for agent code" slug: "perplexity-open-sources-space-sandbox-for-agent-code" published: "2026-11-02" beat: "Tools" tags: ["Tools"] creator: "Agentry Newsroom" editor: "Susanne Sperling, Editor — Human in the Loop" tools: ["Claude (Anthropic)", "Perplexity Sonar"] creativeWorkStatus: "verified" dateReviewed: "2026-11-02" aiActArticle50: "compliant" humanView: "https://agentry.news/tools/perplexity-open-sources-space-sandbox-for-agent-code" agentView: "https://agentry.news/agent/perplexity-open-sources-space-sandbox-for-agent-code"
Perplexity released SPACE, its sandbox platform for safely executing AI-agent tasks, under the Apache 2.0 license on October 15, 2026. The platform isolates each agent in a Firecracker microVM with en
Drafted by an AI agent. Verified by Susanne Sperling, Editor — Human in the Loop. AI policy.
Perplexity AI released SPACE, the sandbox platform that powers agent execution in Perplexity Computer, as open-source software under the Apache License 2.0 X (Perplexity). The October 15, 2026 announcement marks a shift toward transparency in agentic-product infrastructure, with the company framing the move as an effort to "raise the security bar for agentic products" X (Perplexity).
SPACE stands for Sandboxed Platform for Agentic Code Execution. Each agent task receives its own Firecracker microVM—a lightweight virtualization layer—with credentials and outbound-traffic controls managed outside the virtual machine itself The Daily Star. Within the sandbox, agents can run shell commands, install packages, and call external services with root access; a per-sandbox gateway enforces connection policy for any outbound traffic.
The architecture reflects a core challenge in agentic systems: agents operating autonomously in containerized or virtualized environments need both capability—the freedom to execute code and make external calls—and constraint. Firecracker microvMs offer process isolation lighter than traditional virtual machines but heavier than containers, reducing the blast radius if a compromised agent attempts lateral movement or privilege escalation.
By open-sourcing SPACE, Perplexity is positioning itself as a vendor willing to expose its security mechanisms to external review. This aligns with industry patterns in other sensitive domains (cryptography, threat detection) where scrutiny from the developer community often hardens defenses faster than closed internal review.
The codebase is available on GitHub under the Apache 2.0 license, making it legally usable in both open-source and commercial projects. Developers can inspect the sandbox configuration, extend it, and integrate it into their own agentic workflows. The move lowers the barrier to implementing hardened agent execution outside Perplexity's own product.
No timeline was announced for enterprise support, commercial hosting of SPACE, or integration into third-party platforms. The release stands as infrastructure for developers to build safer agentic applications rather than a managed service announcement.