Directory / Perplexity Computer
Perplexity Computer
Runs each task in its own Firecracker microVM, and keeps credentials outside the sandbox. Admin controls (per-member access, audit logs, a network firewall) are on Enterprise plans. Docs show no step where you approve risky actions, and no stop button you can use yourself.
Lock this down first
On Enterprise, turn on the network firewall policy with an allowlist. Until you do, sandboxes have unrestricted outbound internet access.
Scorecard
| Criterion | Rating | Notes |
|---|---|---|
| Permission granularity | 2/3 | Admins can turn off individual tools: "Individual connectors can be disabled at the organization level… which prevents members from authenticating or using those integrations within Computer tasks." On/off per tool, with no argument-level rules. Choosing which members get Computer is Enterprise-only. |
| Human approval gates | Unverified | Not confirmed in the docs we checked. |
| Sandboxing | 2/3 | Each task runs in its own Firecracker microVM (blog), an isolated container with a dedicated filesystem and browser (help docs). Always on for all users, but admins can't configure or lock it. |
| Secrets handling | 2/3 | Credentials never pass into the sandbox. Only the credentials a task needs are injected, through a proxy, and sub-agents use short-lived proxy tokens. Applies to all users. Blog-only, capped at 2. |
| Audit logs | 2/3 | Enterprise only. Computer activity (tasks, connector use, credits) goes into the org audit logs, which can export to SIEMs such as Splunk, Sentinel and Datadog. |
| Kill switch / interrupt | 1/3 | Admins can turn Computer off for the whole org at any time, and automatic detection triggers a safe stop. No user stop or cancel is documented, and firewall changes may not reach tasks already running. |
| Network egress control | 2/3 | Off by default: "When disabled, Computer sandboxes have unrestricted outbound internet access." Enterprise admins can set allow and deny rules for outbound traffic. |
Sources
- https://www.perplexity.ai/help-center/en/articles/13837784-what-is-computer
- https://www.perplexity.ai/help-center/en/articles/13901210-computer-for-enterprise
- https://www.perplexity.ai/help-center/en/articles/14092010-configuring-network-firewall-policy-for-computer
- https://www.perplexity.ai/help-center/en/articles/11187754-enterprise-roles-and-permissions
- https://www.perplexity.ai/hub/blog/how-we-built-security-into-computer
- https://www.perplexity.ai/hub/blog/secure-sandboxes-for-agents
Vendor? Request a correction. We review corrections within 7 days.