Perplexity open sources SPACE, its AI agent sandbox, and says partners including CoreWeave, Akamai, and Crusoe agreed to offer SPACE to customers
THE SCOOP — Perplexity is giving away the software it has been using to combat rogue AI agents, the company told Semafor Thursday.
Context & Ripple Effects
Perplexity had been extending beyond its answer engine: its Search API opened its web index to developers, then Perplexity Computer introduced a digital worker that routes tasks across 19 models. SPACE supplies the isolation and recovery layer behind that agent product.
By open-sourcing the sandbox while CoreWeave, Akamai, and Crusoe agree to offer it to customers, Perplexity turns an internal control for agent execution into infrastructure that other teams can deploy through their existing providers.
First-order effects
- Developers and enterprise customers gain access to SPACE’s agent-isolation, recovery, and long-running-session capabilities through open source and the three participating providers.
- Perplexity’s Computer platform gains a broader deployment path: its underlying security layer is no longer confined to Perplexity-operated sessions.
Second-order effects
- CoreWeave, Akamai, and Crusoe can package a common agent-sandbox layer alongside their respective customer offerings, making secure execution a service feature rather than a proprietary Perplexity-only capability.
- Other AI-agent vendors face pressure to show comparable controls for isolating and recovering long-running work, especially where customers require agents to operate across tools and models.
Third-order effects
- If providers standardize on shared sandboxing software, the competitive layer in agent infrastructure shifts toward deployment, operations, and integrations rather than the sandbox alone.
- The move points toward an agentic data-center stack in which secure execution environments become a baseline component offered by infrastructure partners.
The trend: AI-agent products are evolving from standalone assistants into deployable infrastructure stacks, with secure execution becoming a shared platform layer.