Perplexity open-sources SPACE, the sandbox behind its agents
The agent isolation Perplexity runs millions of times a day is now on GitHub — snapshots, branching, and 0 host escapes in 108 attempts.
Copy markdown
SPACE is open, and the repo is live
Perplexity open-sourced SPACE, the platform that's run every Perplexity Computer session since July: each agent gets its own small VM with its own OS, spun up and torn down by a central control plane. The code is at github.com/perplexityai/SPACE, so you can run the same untrusted-code isolation it uses in production instead of renting a commercial sandbox.
Build this weekend: a disposable computer for your agents
SPACE ships isolated code execution, pause/resume, crash recovery, and session branching, and it stores only diffs so snapshotting and forking an environment stays cheap. Point your own coding or research agent at it and you get checkpoint-and-rollback plus parallel what-if branches without standing up VM plumbing yourself.
The security receipt: zero host escapes
Perplexity's published eval logged no VM-to-host escapes across 108 attempts; Semafor reports nine frontier models were turned loose to break out over 118 tries and none reached the host, while agents did escape several unnamed proprietary sandboxes in the same test. Some runs slipped past network rules, which Perplexity says it has since patched.
Faster than what it replaced, already on three clouds
On identical production traffic, SPACE created sandboxes 3–5x faster than the commercial provider it swapped out, at millions of creations a day. CoreWeave and Akamai have launched it on their platforms and Crusoe is adding it to Managed AI Services, so you can self-host from the repo or rent it managed. The announcement names no license yet — check the repo before you build on it.