Perplexity open-sourced SPACE on October 15, making the sandbox platform behind its Computer agent available to developers. The public repository lists the Apache 2.0 license. This is infrastructure for running agent and user code in isolation, not a new consumer subscription or a guarantee that agent actions are harmless.
The company says it replaced its prior commercial sandbox provider with SPACE in July and has used it for all Computer sessions since then. It reports millions of sandbox creations per day and creation speeds three to five times faster on the same production traffic. Those are Perplexity's measurements, not independent results for every deployment.
Each sandbox runs in a small virtual machine with its own operating system. A control plane manages creation, pause, resume and removal, while platform-held credentials and network access are managed outside the untrusted workspace. That architecture is intended to limit what code in the workspace can reach.
SPACE also supports file snapshots, running-environment checkpoints and session branching. Perplexity says it stores changes rather than repeatedly copying complete environments, supporting recovery and alternative branches of work. Restoring a workspace does not by itself reverse every action an agent may have taken in an external service.
Perplexity reports no virtual-machine escapes in 108 deliberate breach attempts, but says some tests bypassed network restrictions. It says it fixed those weaknesses and the identified attack methods failed in follow-up tests. The test count and disclosed fixes should not be read as proof against all future attacks.
CoreWeave and Akamai are named as having tested and launched SPACE on their platforms, with customer availability work continuing; Crusoe is also a partner. Developers should use the repository's setup and security guidance to check supported configurations, permissions and network policies. Open-source availability is separate from a managed service's price or launch terms.