Perplexity Open-Sources SPACE, a Firecracker MicroVM Sandbox for AI Agents
Perplexity has open-sourced SPACE , the sandbox platform behind every task in Perplexity Computer. The Perplexity SPACE sandbox gives each agent task its own Firecracker microVM. Credentials and outbound traffic are controlled from outside that VM. The code ships under Apache 2.0 on GitHub . For teams building coding or browsing agents, this is a production-tested isolation layer they can self-host. TL;DR Size: Rust codebase, release 0.8.0 , the public baseline. HTTP API plus server-sent events. Runs on: A Linux x86_64 host with KVM , /dev/kvm , btrfs and Docker. Local Kind (Kubernetes) or direct mode. No macOS. Performance: In production, median create latency fell from 185 ms to 60 ms versus Perplexity’s previous provider. Best: 0 of 108 VM-to-host escape attempts succeeded across 9 frontier models. Worst: Before fixes, agents bypassed the egress policy in 11 of 54 partial-network runs. What is Perplexity SPACE? SPACE (Sandboxed Platfor...
