Perplexity open-sources SPACE, the agent sandbox that runs its Computer product, on GitHub

Each SPACE sandbox runs inside a small virtual machine with its own operating system, under a control plane that creates, pauses, resumes and removes workspaces. Network access and credentials are held outside the sandbox, and snapshots store changes rather than full copies. Perplexity says SPACE has powered every Computer session since July, handles millions of sandbox creations a day, and creates sandboxes three to five times faster than the commercial provider it replaced. In Perplexity's published testing, agents trying to break out found no escape from the virtual machine to the host in 108 attempts, though some found ways around network restrictions. Those gaps were fixed and did not work in retests. Semafor reported 118 attempts across nine models. Akamai has launched SPACE on its cloud, Crusoe is adding it to managed services, and CoreWeave published setup guidance. For agent builders, the design pattern is the useful part: treat the sandbox as untrusted, keep credentials outside it, and rely on system controls rather than model behavior. That matches the containment push after a week of agent incident reports.