Secure sandboxes for agents
Blog post from Perplexity
Perplexity has introduced SPACE, a sandbox platform for its Computer agent system that aims to combine strong security, efficiency, and functionality for AI agents performing long-running tasks involving code, files, networks, and sensitive information. SPACE creates ephemeral Firecracker microVM sandboxes that are destroyed after tasks finish, while session-level rolling snapshots preserve memory and files so work can be paused, resumed, branched, or restored for up to a week. Its architecture separates responsibility among a stateless Control Plane, node-level services that manage credentials and network access outside the sandbox, and isolated in-sandbox processes, limiting a compromised agent’s access to only its authorized task. The platform also supports credential isolation, controlled protocol forwarding, tenant separation, encrypted storage, customer-managed encryption keys, multiple infrastructure backends, and on-premises or offline deployment. Built in 10 weeks and used internally for two months, SPACE is now available to all Computer users and has reportedly handled millions of sandbox creations, with early NVIDIA Vera CPU tests indicating faster agent workflow and concurrent sandbox startup performance.
Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.