Perplexity open-sources SPACE, a Firecracker microVM sandbox for AI agents

Perplexity has open-sourced SPACE, the sandbox platform behind every task in Perplexity Computer, under Apache 2.0 on GitHub.

Each agent task runs in its own Firecracker microVM, with credentials and outbound traffic controlled from outside the VM. In Perplexity's red-team tests, 0 of 108 VM-to-host escape attempts succeeded across 9 models, while 11 of 54 partial-network runs bypassed egress policy before fixes.