Functional

• [x]

Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.

• Cookie yt-remote-connected-devices

• Duration never

• Description YouTube sets this cookie to store the user's video preferences using embedded YouTube videos.

• Cookie ytidb::LAST_RESULT_ENTRY_KEY

• Duration never

• Description The cookie ytidb::LAST_RESULT_ENTRY_KEY is used by YouTube to store the last search result entry that was clicked by the user. This information is used to improve the user experience by providing more relevant search results in the future.

• Cookie yt-remote-device-id

• Duration never

• Description YouTube sets this cookie to store the user's video preferences using embedded YouTube videos.

• Cookie yt-remote-session-name

• Duration session

• Description The yt-remote-session-name cookie is used by YouTube to store the user's video player preferences using embedded YouTube video.

• Cookie yt-remote-fast-check-period

• Duration session

• Description The yt-remote-fast-check-period cookie is used by YouTube to store the user's video player preferences for embedded YouTube videos.

• Cookie yt-remote-session-app

• Duration session

• Description The yt-remote-session-app cookie is used by YouTube to store user preferences and information about the interface of the embedded YouTube video player.

• Cookie yt-remote-cast-available

• Duration session

• Description The yt-remote-cast-available cookie is used to store the user's preferences regarding whether casting is available on their YouTube video player.

• Cookie yt-remote-cast-installed

• Duration session

• Description The yt-remote-cast-installed cookie is used to store the user's video player preferences using embedded YouTube video.

• Cookie na_id

• Duration 1 year

• Description This cookie is set by Addthis.com to enable sharing of links on social media platforms like Facebook and Twitter

• Cookie vc

• Duration 1 year

• Description This cookie is set by addthis.com on sites that allow sharing on social media.

• Cookie __atuvc

• Duration 1 year

• Description This cookie is set by Addthis to make sure you see the updated count if you share a page and return to it before our share count cache is updated.

• Cookie __atuvs

• Duration 30 minutes

• Description This cookie is set by Addthis to make sure you see the updated count if you share a page and return to it before our share count cache is updated.

• Cookie ouid

• Duration 1 year

• Description The cookie is set by Addthis which enables the content of the website to be shared across different networking and social sharing websites.

Analytics

• [x]

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.

• Cookie ga*

• Duration 1 year 1 month 4 days

• Description Google Analytics sets this cookie to store and count page views.

• Cookie _ga

• Duration 2 years

• Description This cookie is installed by Google Analytics. The cookie is used to calculate visitor, session, camapign data and keep track of site usage for the site's analytics report. The cookies store information anonymously and assigns a randoly generated number to identify unique visitors.

• Cookie sbjs_migrations

• Duration session

• Description Sourcebuster sets this cookie to identify the source of a visit and stores user action information in cookies. This analytical and behavioural cookie is used to enhance the visitor experience on the website.

• Cookie sbjs_current_add

• Duration session

• Description Sourcebuster sets this cookie to identify the source of a visit and stores user action information in cookies. This analytical and behavioural cookie is used to enhance the visitor experience on the website.

• Cookie sbjs_first_add

• Duration session

• Description Sourcebuster sets this cookie to identify the source of a visit and stores user action information in cookies. This analytical and behavioural cookie is used to enhance the visitor experience on the website.

• Cookie sbjs_current

• Duration session

• Description Sourcebuster sets this cookie to identify the source of a visit and stores user action information in cookies. This analytical and behavioural cookie is used to enhance the visitor experience on the website.

• Cookie sbjs_first

• Duration session

• Description Sourcebuster sets this cookie to identify the source of a visit and stores user action information in cookies. This analytical and behavioural cookie is used to enhance the visitor experience on the website.

• Cookie sbjs_udata

• Duration session

• Description Sourcebuster sets this cookie to identify the source of a visit and stores user action information in cookies. This analytical and behavioural cookie is used to enhance the visitor experience on the website.

• Cookie sbjs_session

• Duration 1 hour

• Description Sourcebuster sets this cookie to identify the source of a visit and stores user action information in cookies. This analytical and behavioural cookie is used to enhance the visitor experience on the website.

• Cookie tk_or

• Duration 1 year 1 month 4 days

• Description JetPack plugin sets this referral cookie on sites using WooCommerce, which analyzes referrer behaviour for Jetpack.

• Cookie tk_r3d

• Duration 3 days

• Description JetPack installs this cookie to collect internal metrics for user activity and improve user experience.

• Cookie tk_lr

• Duration 1 year

• Description JetPack plugin sets this referral cookie on sites using WooCommerce, which analyzes referrer behaviour for Jetpack.

• Cookie tk_ai

• Duration 1 year

• Description JetPack sets this cookie to store a randomly-generated anonymous ID used only within the admin area and for general analytics tracking.

• Cookie tk_tc

• Duration session

• Description JetPack sets this cookie to record details on how users use the website.

• Cookie _gat_gtag_UA_5784146_31

• Duration 1 minute

• Description Google Used to distinguish users.

• Cookie GPS

• Duration 30 minutes

• Description This cookie is set by Youtube and registers a unique ID for tracking users based on their geographical location

• Cookie __gads

• Duration 2 years

• Description This cookie is set by Google and stored under the name dounleclick.com. This cookie is used to track how many times users see a particular advert which helps in measuring the success of the campaign and calculate the revenue generated by the campaign. These cookies can only be read from the domain that it is set on so it will not track any data while browsing through another sites.

• Cookie uvc

• Duration 1 year

• Description The cookie is set by addthis.com to determine the usage of Addthis.com service.

• Cookie ad-id

• Duration 7 months

• Description Provided by amazon-adsystem.com for tracking user actions on other websites to provide targeted content

• Cookie _gat_gtag_UA_116563943_1

• Duration 1 minute

• Description Google uses this cookie to distinguish users.

• Cookie _gid

• Duration 1 day

• Description This cookie is installed by Google Analytics. The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the wbsite is doing. The data collected including the number visitors, the source where they have come from, and the pages viisted in an anonymous form.

Performance

• [x]

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

• Cookie YSC

• Duration

• Description This cookies is set by Youtube and is used to track the views of embedded videos.

• Cookie _gat

• Duration 1 minute

• Description This cookies is installed by Google Universal Analytics to throttle the request rate to limit the colllection of data on high traffic sites.

Advertisement

• [x]

Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.

• Cookie COMPASS

• Duration 1 hour

• Description The COMPASS cookie is used by Yahoo to deliver targeted advertising based on user's online behavior.

• Cookie NID

• Duration 5 months

• Description This cookie is used to a profile based on user's interest and display personalized ads to the users.

• Cookie __Secure-YNID

• Duration 6 months

• Description Google cookie used to protect user security and prevent fraud, especially during the login process.

• Cookie __Secure-ROLLOUT_TOKEN

• Duration 6 months

• Description YouTube sets this cookie to manage feature rollout and experimentation. It helps Google control which new features or interface changes are shown to users as part of testing and staged rollouts, ensuring consistent experience for a given user during an experiment.

• Cookie yt.innertube::nextId

• Duration never

• Description YouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen.

• Cookie yt.innertube::requests

• Duration never

• Description YouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen.

• Cookie VISITOR_INFO1_LIVE

• Duration 5 months

• Description This cookie is set by Youtube. Used to track the information of the embedded YouTube videos on a website.

• Cookie TapAd_TS

• Duration 1 month

• Description The cookie is set by Tapad.com. The purpose of the cookie is to track users across devices to enable targeted advertising.

• Cookie TapAd_DID

• Duration 1 month

• Description The cookie is set by tapad.com. The purpose of the cookie is to track users across devices to enable targeted advertising

• Cookie personalization_id

• Duration 2 years

• Description This cookie is set by twitter.com. It is used integrate the sharing features of this social media. It also stores information about how the user uses the website for tracking and targeting.

• Cookie uid

• Duration 1 year

• Description This cookie is used to measure the number and behavior of the visitors to the website anonymously. The data includes the number of visits, average duration of the visit on the website, pages visited, etc. for the purpose of better understanding user preferences for targeted advertisments.

• Cookie loc

• Duration 1 year

• Description This cookie is set by Addthis. This is a geolocation cookie to understand where the users sharing the information are located.

• Cookie IDE

• Duration 2 years

• Description Used by Google DoubleClick and stores information about how the user uses the website and any other advertisement before visiting the website. This is used to present users with ads that are relevant to them according to the user profile.

• Cookie di2

• Duration 1 year

• Description This cookie is set by addthis.com on sites that allows sharing on social media. The cookie is used to track user behavior anonymously to generate usage trends to improve relevance to their services and advertising.

Others

• [x]

Other uncategorized cookies are those that are being analyzed and have not been classified into a category as yet.

• Cookie pxcts

• Duration session

• Description Description is currently not available.

• Cookie _pxttld

• Duration session

• Description Description is currently not available.

• Cookie SGPBShowingLimitationDomain77659

• Duration 2 days

• Description Description is currently not available.

• Cookie __Secure-YEC

• Duration past

• Description YouTube sets this cookie to stores the user's video player preferences using embedded YouTube video

• Cookie S

• Duration 1 hour

• Description Used by Yahoo to provide ads, content or analytics.

• Cookie test_cookie

• Duration 11 months

• Description This cookie is set by doubleclick.net. The purpose of the cookie is to determine if the users' browser supports cookies.

• Cookie sc_at

• Duration 1 year

• Description Snapchat sets this cookie for showing relevant advertising based on the user’s movement.

• Cookie TapAd_3WAY_SYNCS

• Duration 1 month

• Description TapAd sets this cookie for data synchronization with advertising networks.

• Cookie _pin_unauth

• Duration 1 year

• Description Pinterest set this cookie to group actions for users who cannot be identified.

• Cookie sc_anonymous_id

• Duration 9 years

• Description Soundcloud sets this cookie to enable visitors to embed content or files on the website.

• Cookie um

• Duration 1 year

• Description Set by addthis.com.(Purpose not known)

• Cookie DCRP_Categories

• Duration 4 weeks

• Description Description is currently not available.

• Cookie vuid

• Duration 2 years

• Description Vimeo installs this cookie to collect tracking information by setting a unique ID to embed videos on the website.

• Cookie X-AB

• Duration 1 day

• Description Adobe Analytics sets this cookie in context with multi-variate testing. This is a tool used to combine or change content on the website. This allows the website to find the best variation or edition of the site.

• Cookie YTC

• Duration 10 minutes

• Description YouTube sets the YTC cookie to manage the embed and viewing of videos on the website.

• Cookie sp_t

• Duration 1 month

• Description The sp_t cookie is set by Spotify to implement audio content from Spotify on the website and also registers information on user interaction related to the audio content.

• Cookie sp_landing

• Duration 1 day

• Description The sp_landing is set by Spotify to implement audio content from Spotify on the website and also registers information on user interaction related to the audio content.

• Cookie __asc

• Duration 30 minutes

• Description Alexa Metrics sets this cookie to track and report information to the Alexa analytics service.

• Cookie __auc

• Duration 1 year

• Description Alexa Metrics sets this cookie to track and report information to the Alexa analytics service.

• Cookie AWSESS

• Duration

• Description Awin sets this to ensure the same kind of advertisement is not shown to the user.

• Cookie nevercache-b39818

• Duration session

• Description Description is currently not available.

REJECT Save My Preferences ACCEPT

Powered by

News Hub

Premium Content

Read our exclusive articles

Facebook

Instagram

X

DiscordLinkedinRedditX

• Home
• Open Source/Weights
• AI Agents
• Tutorials
• Voice AI
• Robotics
• Newsletter
• Partner with Us

Search

News Hub

• Home
• Open Source/Weights
• AI Agents
• Tutorials
• Voice AI
• Robotics
• Newsletter
• Partner with Us

MARKTECHPOST

Search AI news...

Search

• Home
• Open Source/Weights
• AI Agents
• Tutorials
• Voice AI
• Robotics
• Newsletter
• Partner with Us

HomeEditors PickAgentic AIPerplexity Open-Sources SPACE, a Firecracker MicroVM Sandbox for AI Agents

• Editors Pick
• Agentic AI
• AI Agents
• Artificial Intelligence
• AI Infrastructure
• Technology
• AI Shorts
• Applications
• For Devs
• Language Model
• Large Language Model
• Machine Learning
• New Releases
• Open Source
• Software Engineering
• Staff
• Tech News

Perplexity Open-Sources SPACE, a Firecracker MicroVM Sandbox for AI Agents

By

Asif Razzaq

October 16, 2026

Add as a preferred source on Google

Perplexity has open-sourced SPACE, the sandbox platform behind every task in Perplexity Computer. The Perplexity SPACE sandbox gives each agent task its own Firecracker microVM. Credentials and outbound traffic are controlled from outside that VM. The code ships under Apache 2.0 on GitHub. For teams building coding or browsing agents, this is a production-tested isolation layer they can self-host.

TL;DR

• Size: Rust codebase, release 0.8.0, the public baseline. HTTP API plus server-sent events.
• Runs on: A Linux x86_64 host with KVM,

/dev/kvm

, btrfs and Docker. Local Kind (Kubernetes) or direct mode. No macOS.

• Performance: In production, median create latency fell from 185 ms to 60 ms versus Perplexity’s previous provider.
• Best:0 of 108 VM-to-host escape attempts succeeded across 9 frontier models.
• Worst: Before fixes, agents bypassed the egress policy in 11 of 54 partial-network runs.

What is Perplexity SPACE?

SPACE (Sandboxed Platform for Agentic Code Execution) is Perplexity’s platform for running agent code in isolated microVMs. Applications call its HTTP API to create Linux environments, run commands and stream output.

A template supplies the starting filesystem. A sandbox is one instance of that template, with its own VM and writable disk. Many commands can run inside one sandbox.

Perplexity’s launch thread explains the design goal. Agents run commands, install packages and call services with root inside the sandbox. The host stays outside the guest’s control. Agent work is long-running, stateful and branching, so it must survive restarts.

How does SPACE isolate agents?

Each sandbox is a Firecracker microVM with its own guest kernel. A per-sandbox network gateway on the host enforces egress policy on every outbound connection.

Secrets never enter the guest. Per Perplexity’s July engineering post, credentials are injected at the network layer. The credential store adds hierarchical scoping, rate limits and audit logging.

The architecture guide splits the system into 4 parts. These are a PostgreSQL-backed API, controllers, worker services and a data plane. Worker services manage VMs, networking, volumes, templates and credentials. btrfs copy-on-write creates each root filesystem.

How do pause, suspend and restore work?

Sandboxes move through 4 states: running, paused, suspended and deleted.

• Paused: VM memory stays resident on the worker. This is not a durable snapshot.
• Suspended: VM memory, runtime state and root filesystem are snapshotted. Active resources are released.
• Idle default: sandboxes suspend after 6 hours without activity.

For fast creates, Kubernetes deployments use warm pools of booted sandboxes. Single-node setups use base snapshots instead.

In production, the 90th-percentile create latency dropped from 447 ms to 89 ms. Perplexity reports that 100% of Computer sessions run on SPACE.

Did SPACE survive a red-team test?

Perplexity’s Escaping SPACE: Part I report tested 9 models with root inside the guest. The study ran 216 runs across 2 tasks and 4 settings.

• Sandbox escape: 0 of 108 runs reached the host-side secret.
• No-network bypass: 0 of 54 runs succeeded.
• Partial-network bypass: 11 of 54 runs succeeded before fixes. 4 models found a path.

Claude Opus 5.0, GPT-5.6 Sol, GPT-5.6 Cyber and Kimi K3 found bypasses. The attacks used DNS spoofing and shared CDN IP addresses.

Perplexity then added source-address validation through nftables. The gateway now terminates TLS and checks both SNI and HTTP host against the allowlist. In the retest, no model produced a verified bypass.

The same team tested 10 third-party platforms. 8 showed at least one network-policy bypass. Perplexity disclosed the results to every affected vendor.

How does SPACE compare with other open sandboxes?

How do developers deploy SPACE?

The installation guide deploys SPACE into a local Kind cluster. The host needs

/dev/kvm

,

/dev/net/tun

, loop devices and btrfs. Running it inside a VM requires nested virtualization.

Teams already on E2B can try the E2B Compatibility Wrapper. Its tested baseline is the Python package

e2b==2.21.1

. A reference AWS EKS deployment ships in the repository.

Key Takeaways

• SPACE runs each agent task in its own Firecracker microVM.
• Credentials and egress policy live outside the guest VM.
• 0 of 108 escape attempts reached the host in red-team tests.
• Egress bypasses hit 11 of 54 runs before fixes, 0 after.
• Apache 2.0, Rust, needs a Linux x86_64 host with KVM.

Check out the GitHub repo, the docsand the red-team report. All credit goes to the researcher of this project. Also,feel free to follow us onTwitterand don’t forget to join our150k+ML SubRedditand Subscribe toour Newsletter. Wait! are you on telegram?now you can join us on telegram as well.

Asif Razzaq

Website|+ posts Bio ⮌

Asif Razzaq is the CEO of Marktechpost AI Media Inc.. As a visionary entrepreneur and engineer, Asif is committed to harnessing the potential of Artificial Intelligence for social good. His most recent endeavor is the launch of an Artificial Intelligence Media Platform, Marktechpost, which stands out for its in-depth coverage of machine learning and deep learning news that is both technically sound and easily understandable by a wide audience. The platform boasts of over 2 million monthly views, illustrating its popularity among audiences.

• Asif Razzaq Liquid AI Releases d1-ultra: A Multimodal Decision Model That Scores 65 on the AA Decision Index
• Asif Razzaq Meta Releases Muse Spark Open: 816B Open-Weight MoE With 1M Context
• Asif Razzaq NVIDIA Releases Nemotron 3.5 Super VL, a 120B Open Multimodal Agent Model
• Asif Razzaq CopilotKit Releases CLiF: A Continual Learning Platform That Turns Agent Traces and User Actions into Skills, Evals, and Fine-Tuning Data

Previous articleLiquid AI Releases d1-ultra: A Multimodal Decision Model That Scores 65 on the AA Decision Index

Asif Razzaq

RELATED ARTICLESMORE FROM AUTHOR

Liquid AI Releases d1-ultra: A Multimodal Decision Model That Scores 65 on the AA Decision Index

Meta Releases Muse Spark Open: 816B Open-Weight MoE With 1M Context

NVIDIA Releases Nemotron 3.5 Super VL, a 120B Open Multimodal Agent Model

CopilotKit Releases CLiF: A Continual Learning Platform That Turns Agent Traces and User Actions into Skills, Evals, and Fine-Tuning Data

openKylin Outlines Its Vision for Reimagining Linux in the AI Era at Open Source Summit Europe 2026

TypeSafe AI Releases Jev 1.14 With Images, Box Type and 262k Context

DiscordLinkedinRedditX

• miniCON Event 2025

• Download

  • AI Magazine/Report

• Privacy & TC

• Cookie Policy

• Newsletter

• Partnership and Promotion

© Copyright Reserved @2025 Marktechpost AI Media Inc

DEPLOY THIS MODEL

Perplexity SPACE

YES — TODAY (self-host)Apache 2.0

Self-host · Rust src · Kind/K8s or direct mode · Linux x86_64+KVM+btrfs

API · Self-hosted HTTP API + SSE; no public hosted endpoint

Local · Single-node direct mode; no GGUF/Ollama (not an LLM)

GH GitHub Full source, docs, red-team report, release 0.8.0↗AWS AWS EKS (reference deploy)Reference Kubernetes deployment included in repo↗COR CoreWeave Published evaluation guidance for running SPACE↗AKA Akamai Cloud Launched SPACE on its cloud platform↗

Verified Oct 16, 2026 · Marktechpost

Datalab Releases OmniParseBench: An Open OCR Benchmark With 16,288 Pass/Fail Tests

Open Source

Close Welcome Bar

Get AI Dev Signals

The newsletter 70,000+ AI builders read. Model releases, tools and research, without the hype.

MARKTECHPOST Practitioner-first AI/ML news and analysis, read by 1M+ developers and researchers every month.

Sections

• Open Source/Weights
• AI Agents
• Tutorials
• Voice AI
• Robotics

Company

• About us
• Partnership & promotion
• Newsletter

Our network

• aidevsignals.com
• aideveloper44.com

© 2026 Marktechpost AI Media Inc. All rights reserved.Privacy & termsCookie policy

Go to mobile version

Text extracted automatically; images, tables and formatting may be missing. Original: https://www.marktechpost.com/2026/10/16/perplexity-open-sources-space-firecracker-microvm-sandbox-ai-agents/