Cloudflare OS reimagines operating system concepts to give AI agents an isolated runtime, strict security governance, and modifiable micro-apps.
On 5 August 2026, Cloudflare open sourced Cloudflare OS under the Apache 2.0 Licence. Despite its name, the platform is not a traditional operating system, such as Linux or Windows, but rather an open framework for AI agents, applications, and organizational workflows. The platform was originally developed and used internally at the company prior to its public release.
Cloudflare OS is structured around three primary pillars:
-
Agent Workspace & Isolated Runtime: An environment grounded in context and skills curated by an organization, providing an isolated runtime where AI agents can write and execute code.
-
Security & Governance Framework: Built-in safeguards and access controls to safely connect agents to internal organizational data and services.
-
Platform for Modifiable Micro-Apps: An interface allowing users to transform initial chat conversations into persistent documents, workflows, or custom micro-applications that can be built, shared, and modified.
Technically, the platform reimagines traditional operating system abstractions within an AI platform framework: it maps its core kernel to packages/workshop-backend, device drivers to packages/gatekeeper-*, and the user shell to packages/workshop-frontend. Within this architecture, traditional processes and executables are reconceptualized as modular “Gadgets” and “Blueprints,” managed under a shared access control list (ACL) permissions framework for strict security governance.
Built on Cloudflare Workers, the platform was created in part by Kenton Varda as a spiritual successor to his earlier Sandstorm.io project. It is hosted live at os.cloudflare.app and available for developers on GitHub.
