SPACE

Perplexity's open-source Firecracker microVM sandbox platform that runs every Perplexity Computer agent task in isolation.

Perplexity · Infrastructure and inference/serving · open-source

Published in Feed

Overview

Perplexity open-sourced SPACE (Sandboxed Platform for Agentic Code Execution) on October 15, 2026 under the Apache 2.0 license. It is the Rust sandbox platform that has run all Perplexity Computer sessions since July, giving each agent task its own Firecracker microVM with a dedicated guest kernel, with credentials and egress policy enforced from outside the VM. Perplexity reports median sandbox creation latency fell from 185 ms to 60 ms (p90 from 447 ms to 89 ms) versus its previous provider, and says 0 of 108 VM-to-host escape attempts by nine frontier models succeeded in its red-team tests.

This is a sourced directory entry. Features and capabilities are reported in the linked sources; this entry does not document independent Aymorphic testing.

Key features

  • One Firecracker microVM per agent task, with root inside the VM and no direct host control
  • Sandbox states: running, paused, suspended and deleted; idle sandboxes suspend after 6 hours by default
  • Saves VM memory, running state and files so tasks can pause, resume or branch from a saved point
  • Per-sandbox network gateway on the host enforces egress policy
  • HTTP API for creating Linux environments and running commands, plus an E2B Compatibility Wrapper
  • Reference deployments for local Kind (Kubernetes) and AWS EKS; requires Linux x86_64 with KVM, btrfs and Docker (no macOS)
  • Perplexity-reported red team: 0 of 108 escape attempts across 9 models succeeded; an earlier 11 of 54 partial-network runs bypassed egress policy before fixes

Use cases

  • Self-hosting isolated execution environments for coding and computer-use agents
  • Replacing a commercial agent-sandbox provider with a Kubernetes-deployed alternative
  • Pausing and branching long-running agent tasks from saved VM state

Pricing

Free and open source (Apache 2.0); you supply the Linux/KVM hosts. CoreWeave, Akamai Cloud and Crusoe are reported to offer it to their customers; their pricing is unknown.

Pricing reflects the source record and may change. Confirm current terms with the provider.

Dates and sources

Released
15 Oct 2026
Record updated
17 Oct 2026
Record last checked
17 Oct 2026

Explore the Feed

Other entries filed under infrastructure and inference/serving; inclusion does not imply equivalent features.

  • NVIDIA PAIR (Personal AI Router)

    NVIDIA's free, open-source personal AI router that spreads local model workloads across PCs on your network; out of beta Oct 13, 2026.

  • Agent37

    YC F26 startup selling low-cost agent sandboxes (gVisor or full VM) with prebuilt harnesses for Claude Code, Hermes and opencode.

  • Microsoft-Decision-1

    Microsoft's Qwen3.5-9B-based decision-scoring model returns calibrated option probabilities in one pass, at $0.042 per million input tokens.

Browse the Feed