Perplexity open sources SPACE agent sandbox after 108 failed escape attempts
Article timeline
The articles in this story. Times are ET.
Aravind Srinivas@AravSrinivasOfficialPerplexity open-sources Space, its tool for building AI search spacesAIPerplexity says it has open-sourced Space and linked readers to a blog post for details. The post itself gives no further features, figures, or licensing terms.
- Aravind Srinivas@AravSrinivasOfficialPerplexity open-sources SPACE, its sandbox platform behind Perplexity Computer
AIPerplexity says it is open-sourcing SPACE, the sandbox platform that powers all of Perplexity Computer. The company says serving millions of sandboxes under production traffic requires many engineering details beyond the sandboxes themselves. The code is available at
- Semafor · TechnologyNewsPerplexity open-sources SPACE, its AI agent sandbox
AIPerplexity is releasing SPACE, the sandbox it uses to contain rogue AI agents, as an open source project, and says CoreWeave, Akamai and Crusoe have agreed to offer it to customers. The company says it tested SPACE by giving nine frontier models instructions to break out, and none escaped in 118 tries, while it found other sandboxes that were not open sourced could be breached.
Perplexity@perplexity_aiOfficialPerplexity open-sources SPACE, first component of its agentic runtime platformAIPerplexity says SPACE is the first component of its Agentic Runtime Platform and is open sourcing it to raise the security bar for agentic products. The post links to a blog post with details.
- Perplexity@perplexity_aiOfficialPerplexity tests SPACE with frontier models and finds no host escapes
AIPerplexity says it attacked its SPACE sandbox with frontier models. In Escaping SPACE: Part I, nine model configurations with root inside the VM made 108 escape attempts, and none reached the host. The full research is linked in the post.
- Perplexity@perplexity_aiOfficialPerplexity Computer agents run with root access in sandboxes
AIAgents in Perplexity Computer can run commands, install packages, and call external services with root access inside the sandbox. The host remains outside the guest's control, and a per-sandbox gateway enforces egress policy on every outbound connection.
- Perplexity@perplexity_aiOfficialPickPerplexity open sources SPACE, the sandbox platform behind Perplexity Computer
AIPerplexity says it is open sourcing SPACE, the sandbox platform that runs every task in Perplexity Computer. SPACE gives each agent task its own Firecracker microVM and controls credentials and outbound traffic from outside the VM. The code is available now under the Apache 2.0 license on GitHub.
- Perplexity@perplexity_aiOfficialPerplexity open sources SPACE, the first component of its agentic runtime platform
AIPerplexity says SPACE is the first component of its Agentic Runtime Platform and is being open sourced to raise the security bar for agentic products. It is available now under the Apache 2.0 license at
- Perplexity@perplexity_aiOfficialPerplexity tests SPACE sandbox, frontier models make 108 escape attempts
AIPerplexity tested its SPACE sandbox by having nine frontier model configurations with root access inside the VM attempt escapes. All 108 attempts failed to reach the host, according to the first part of its Escaping SPACE research.
- Perplexity@perplexity_aiOfficialPerplexity Computer agents run with root access in sandboxes
AIAgents in Perplexity Computer can run commands, install packages, and call external services with root access inside the sandbox. The host remains outside the guest's control, and a per-sandbox gateway enforces egress policy on every outbound connection.
- Perplexity@perplexity_aiOfficialPickPerplexity open sources SPACE, the sandbox platform behind Perplexity Computer
AIPerplexity says it is open sourcing SPACE, the sandbox platform that runs every task in Perplexity Computer. SPACE gives each agent task its own Firecracker microVM and controls credentials and outbound traffic from outside the VM. The post links to a blog post with more detail.