Summary
On October 15, 2026, Perplexity released SPACE (Sandboxed Platform for Agentic Code Execution) under Apache 2.0, the Rust-based Firecracker microVM sandbox that isolates every task in Perplexity Computer, with credentials and outbound traffic controlled outside each VM. Perplexity also published red-team results: zero VM-to-host escapes across 108 attempts, though agents bypassed egress policy in 11 of 54 partial-network runs before fixes.
What changed
Perplexity published SPACE as open source under Apache 2.0: a Firecracker microVM sandbox with an HTTP API to create Linux environments, run commands, and manage sandboxes, plus a Kubernetes deployment path and an E2B-compatible wrapper.
Why it matters
Open-sourcing a production agent-isolation platform gives teams a vetted alternative to commercial sandboxes like E2B and Daytona for running untrusted agent code, and makes microVM-per-task isolation a more accessible default for secure agent execution.
Evidence excerpt
Each agent task gets its own Firecracker microVM ... Across 108 attempts, zero VM-to-host escapes succeeded.