Cloudflare open-sources AI workspace platform enabling non-coders to build internal applications

Aug 6, 2026

Cloudflare has open-sourced Cloudflare OS, an AI-powered workspace platform that enables non-technical employees to build and modify custom applications using natural language. Originally deployed internally in May 2026, the platform is now available on GitHub. To address security risks associated with AI-generated code, Cloudflare OS utilizes a capability-based security model, isolating applications within lightweight V8 sandboxes and using Gatekeeper Workers to strictly govern access to internal company systems.

Cloudflare OS open source release

▪Deploying the Cloudflare OS backend requires a paid subscription to the Cloudflare Workers Paid plan.
▪The open-source version of Cloudflare OS was made available on GitHub on August 5, 2026.
▪Cloudflare has open-sourced Cloudflare OS, an AI agent workspace platform designed to let employees build applications using natural language.

AI workspace platform capabilities

▪Cloudflare OS allows users to research topics, create documents, slides, and spreadsheets, and build collaborative, full-stack applications.
▪Applications built within Cloudflare OS can remain connected to live data sources and be modified in real time by both human users and AI agents.
▪Cloudflare OS integrates with Cloudflare AI Gateway to let administrators monitor AI inference spending, set budgets, and enforce rate limits.

Capability-based security model

▪Gatekeepers, which are service-specific Workers, sit between Cloudflare OS and external services to manage API credentials and enforce access policies.
▪Cloudflare OS uses a capability-based security model where AI agents start with zero access permissions and must explicitly request resources.
▪Cloudflare OS isolates applications using Dynamic Workers and Durable Objects Facets, running server code with global outbound networking disabled by default.

Internal employee deployment patterns

▪Thousands of Cloudflare employees use Cloudflare OS daily to automate repeatable tasks, visualize data, and create documents.
▪Cloudflare deployed the first version of Cloudflare OS internally to its employees in May 2026.
▪To maintain code quality, Cloudflare implemented the Engineering Codex, an AI-assisted code reviewer that flagged nearly 250,000 deviations and blocked 16,000 merges over four months.

Vibe coding platform features

▪Cloudflare OS allows users to share an application's blueprint, enabling others to instantiate their own copy of the app with independent state and resources.
▪Cloudflare OS supports 'vibe coding' by enabling users to describe desired software workflows in natural language for an AI agent to build.

Non-technical user empowerment

▪Cloudflare OS enables non-technical employees to build and modify functional applications without needing software engineering or development experience.
▪Cloudflare principal engineer Kenton Varda stated that the platform's sandbox is secure enough that non-technical users can vibe code without introducing significant security bugs.