Cloudflare OS reimagines operating system concepts to give AI agents an isolated runtime, strict security governance, and modifiable micro-apps.
On August 5, 2026, Cloudflare open-sourced Cloudflare OS under the Apache 2.0 Licence. Despite its name, the platform is not a traditional operating system, such as Linux or Windows, but rather an open framework for artificial intelligence (AI) agents, applications, and organisational workflows. The platform was originally developed and used internally at the company prior to its public release.
Cloudflare OS is structured around three primary pillars:
-
Agent workspace and isolated runtime: An environment grounded in context and skills curated by an organisation, providing an isolated runtime where AI agents can write and execute code.
-
Security and governance framework: Built-in safeguards and access controls to safely connect agents to internal organisational data and services.
-
Platform for modifiable micro-apps: An interface allowing users to transform initial chat conversations into persistent documents, workflows, or custom micro-applications that can be built, shared, and modified.
Technically, the platform reimagines traditional operating system abstractions within an AI platform framework: it maps its core kernel to packages/workshop-backend, device drivers to packages/gatekeeper-*, and the user shell to packages/workshop-frontend. Within this architecture, traditional processes and executables are reconceptualised as modular ‘Gadgets’ and ‘Blueprints’, managed under a shared access control list (ACL) permissions framework for strict security governance.
Built on Cloudflare Workers, the platform was created in part by Kenton Varda as a spiritual successor to his earlier Sandstorm.io project. It is hosted live at os.cloudflare.app and available for developers on GitHub.
