Cloudflare has announced the open-source release of Cloudflare OS, a platform designed to give every employee access to an AI agent and workspace tailored to their organization’s specific needs, systems, and procedures.
According to the announcement, the company first deployed an internal version of Cloudflare OS to its own employees in May of this year. Thousands of workers across multiple departments have used it daily to create documents and slides, automate repeatable tasks, and build small applications to visualize data and support their work.
The platform operates through a browser-based agent workspace grounded in context and skills that organizations curate themselves. Rather than requiring users to be developers or use a terminal, employees interact with the system conversationally. When given a goal, the agent can draw on the organization’s collected knowledge and work with existing tools and data to complete tasks.
Cloudflare OS combines three main components: an agent workspace with an isolated runtime where agents can write and run code; a security and governance framework for controlled access to internal data and services; and a platform for building, sharing, and modifying personal applications.
According to the source material, Cloudflare rebuilt the platform after learning from its internal deployment. The original version centered on individual workspaces and static apps, but collaboration revealed a critical security gap. While the Model Context Protocol (MCP) could specify which tools an agent could access, it did not ensure agents could not observe and combine information across systems in unauthorized ways.
The new version addresses this by implementing agents that start with no access to any resources. Agents can request access to specific resources, which organizations can grant or deny. Generated code receives resources as typed bindings with credentials completely isolated from the agent itself. Server code runs in a Dynamic Worker with outbound networking disabled, while client code runs in a sandboxed browser frame.
Cloudflare’s CIO Sam Rhea provided additional context on the company’s journey building the system. The open-source release allows any organization to deploy Cloudflare OS, connect it to their internal systems, customize interfaces, and add the skills and context that reflect how their company operates. The platform enables various use cases including research using company resources, creating connected documents and spreadsheets, building collaborative apps, and running deterministic workflows that combine scheduled tasks with AI judgment where needed.
Key facts
- Cloudflare deployed an internal version of Cloudflare OS to all employees in May, with thousands using it daily across non-engineering and engineering roles
- The platform provides browser-based agent workspaces grounded in company-specific context, procedures, and curated skills
- Cloudflare rebuilt the platform to address security gaps, implementing a framework where agents start with no access and must request permission for specific resources
- The open-source version allows any organization to deploy, customize, and connect Cloudflare OS to their internal systems and tools