On October 15, 2026, Perplexity released its execution sandbox to the public. The SPACE repository — Sandboxed Platform for Agentic Code Execution, written in Rust — carries an Apache 2.0 license, 820 stars as of October 16 (770 in the first 24 hours per the announcement), and the production record of powering every Perplexity Computer agent session since July 2026.
The technical foundation is Firecracker microVMs — the same AWS-originated virtual machine monitor underpinning E2B, DigitalOcean Agent Droplets, and the sandbox forking pattern our earlier coverage identified as one of two load-bearing pillars of agent security. Each SPACE agent task runs in its own microVM with credentials and outbound traffic controlled from outside the VM. The performance numbers are notable: median sandbox spin-up of approximately 60 milliseconds, with support for pause/resume and rolling snapshots persisting up to one week. Perplexity reports zero escapes across approximately 118 adversarial test attempts.
The repository ships with an E2B Compatibility Wrapper supporting the E2B Python SDK, documented in the SPACE documentation. Cloud partners CoreWeave, Akamai, and Crusoe are working to offer SPACE to their own customers.
The real forward signal is not the sandbox itself but what Perplexity says comes next. Secondary coverage reports that Perplexity positions SPACE as part of a broader Agentic Runtime Platform roadmap — language that signals an infrastructure play extending well beyond isolated execution. The primary blog page at perplexity.ai returned a Cloudflare challenge at our fetch, so the roadmap framing is labeled at retrieval strength rather than verbatim primary source.
What matters here is the pattern. Multiple vendors have converged on near-identical Firecracker-based per-agent isolation in the same period. Our October 3 coverage documented five platforms shipping copy-on-write isolation in a single week — DigitalOcean, Uber, E2B, Daytona, and Cloudflare. The Kubernetes Agent Sandbox CRD reached general availability in May 2026 with 16x growth in five months, allocating 300 sandboxes per second at 90% under 200 milliseconds. The execution layer is no longer a competitive advantage. It is a commodity.
The control plane is where the moat is concentrating. The MCP Registry crossed 42,000 servers. Identity vendors — Descope, ServiceNow, Postman — are embedding directly into the gateway layer. Enterprise API platforms are building protocol-agnostic control planes. The infrastructure bifurcation we have tracked since August is now the defining shape of the market: tool discovery is scaling on momentum while agent governance infrastructure catches up.
For builders, the message is straightforward. Stop building custom sandboxes. SPACE, E2B, Modal, and the K8s Agent Sandbox CRD all solve the isolation problem. Direct your engineering resources upward: agent governance, identity, orchestration, and the coordination fabric that sits between agents and the systems they touch.
For investors, the commodity status of the sandbox layer changes the calculus. The 150,000-agent enterprise Gartner projects by 2028 will not be bottlenecked on execution isolation. The bottleneck is how those agents discover tools, establish trust, and coordinate across vendor boundaries. The companies owning the control plane — not the sandbox — will define the agent infrastructure market.
SPACE is a capable, production-tested sandbox. It is also proof that the sandbox is no longer the story. The story is what gets built on top of it.
