Perplexity open-sources its SPACE agent sandbox

On October 15, 2026, Perplexity released SPACE as open-source software under the Apache License 2.0 and made the code available in a public repository.[1][2] SPACE stands for Sandboxed Platform for Agentic Code Execution.[3] Perplexity says its aim is to give developers a production-tested foundation for agent runtimes.[1] The repository describes an HTTP API that applications can use to create Linux environments, execute commands, collect output, and manage sandbox lifecycles.[3] That makes the release relevant to teams building agent systems that need a way to run code in managed environments.

Each SPACE sandbox runs in a small virtual machine with its own operating system, separating agent work from the host system.[1] Perplexity says SPACE manages network access and platform-held credentials outside the sandbox, allowing agents to connect to authorized services without placing those credentials in their working environment.[1] The platform also takes frequent snapshots and checkpoints to preserve progress across interruptions, and stores changes rather than repeatedly copying entire environments.[1] In Computer, SPACE supports isolated code execution, pause and resume, recovery, and session branching.[1] These features give developers several controls to assess when designing workflows that may be interrupted or require restricted access.

Perplexity says it replaced its commercial sandbox provider with SPACE in July, and that SPACE has powered all Computer sessions since then.[1] The company says the platform handles millions of sandbox creations per day and reports creation speeds three to five times faster than with its previous provider.[1] In its published security evaluation, Perplexity recorded no escape from a virtual machine to the host in 108 attempts.[1] It says it fixed weaknesses and that neither of two identified attack methods succeeded in follow-up testing.[1] Separately, Semafor reported testing across nine frontier models and 118 breakout attempts, none successful; it also reported Perplexity said those models escaped other sandboxes that were not open-sourced.[4]

Perplexity says Akamai tested SPACE and launched it on its cloud platform, and is working with Perplexity to offer the platform to customers.[1] The company says Crusoe is adding SPACE to its Managed AI Services portfolio, while CoreWeave has published setup guidance for evaluating SPACE on CKS.[1] Perplexity says it disclosed related weaknesses it found in other sandbox platforms to their vendors.[1] It also argues that independent controls in the surrounding system can help contain damage if safeguards fail.[1] These announcements establish routes for evaluation, but do not by themselves show how SPACE performs across other organizations’ workloads.