Sandboxing and guardrails for agents in Perplexity Computer and Comet

Perplexity says SPACE isolates every Computer task, keeps platform credentials and network controls outside the sandbox, and supports snapshots to roll back changes. In tests that gave nine models root access inside SPACE, the company says none escaped the VM in 108 runs. Separate network tests found bypasses that it says it fixed and retested. Perplexity also says Computer and Comet screen retrieved content for prompt injection, sensitive actions require confirmation, and Trail of Bits audited these defenses.