Summary
On July 15, 2026, Perplexity launched SPACE, a secure sandbox that runs its Computer agent's tasks inside Firecracker microVMs with hardware-level isolation. Sessions can be paused, resumed up to a week later, or branched into multiple sandboxes, and credentials such as passwords and API keys stay outside the sandbox in the user's own credential store. In a week of internal testing SPACE handled 1.25 million sandbox creations and 11.9 million reconnections.
What changed
Perplexity introduced SPACE, a sandbox for its Computer agent using Firecracker microVMs: pausable, resumable (up to a week later), and branchable sessions; credential isolation with API keys and passwords kept outside the sandbox and user-controlled encryption keys; and hardware-level isolation.
Why it matters
Long-running, tool-using agents need a durable, isolated execution substrate to be trusted with real credentials and multi-step work; purpose-built agent sandboxes like SPACE are becoming the security foundation that lets consumer and enterprise agents act without exposing secrets.
Evidence excerpt
SPACE wraps sessions that can be paused, resumed or branched into multiple sandboxes. Passwords and API keys remain entirely outside the sandbox. The platform runs tasks within Firecracker microVMs. SPACE supported 1.25 million sandbox creations and 11.9 million reconnections.