By BigGo Finance
Publication Date: 2026-10-15 21:35:00
Perplexity on October 15 open-sourced “SPACE,” the sandbox infrastructure that underpins its AI agent “Computer.” The code is available on GitHub under the Apache License 2.0.
SPACE stands for “Sandboxed Platform for Agentic Code Execution.” Implemented in Rust, the platform isolates each sandbox as a Firecracker microVM. Applications interact with SPACE through an HTTP API to create Linux environments, execute commands, retrieve output, and manage sandboxes. Network access and credentials are managed outside the sandbox boundary — agents can connect to authorized services, but credentials are never stored within the working environment itself.
The company replaced a commercial sandbox provider’s service with SPACE in July 2026. It now handles all Computer sessions, generating millions of sandboxes per day. Under identical production traffic, sandbox creation speeds reached 3–5x those of the previous provider.
Attack Testing Results and Remediation
In security validation, nine frontier models were tasked with attempting boundary escapes. Across 108 attempts, zero VM-to-host escapes succeeded. Technical staff member Zibi Braniecki said, “Many companies are struggling to figure out how to build secure AI agents and hitting walls. We have a solution.”
However, methods to bypass network restrictions were discovered. The company says these have been patched, and the exploits no longer succeed in retesting. Additionally, when non-open-source sandbox platforms from other…
