Perplexity’s Secure Intelligence Institute published a red-team report on SPACE, the sandbox platform used by Perplexity Computer. Across 108 VM-isolation escape attempts, no VM-to-host escape was observed; however, when limited network access was allowed, four of nine models bypassed network restrictions via techniques including DNS spoofing or shared-IP routing.

Perplexity reports that its retesting found no verified bypass for the two mechanisms it changed.