Key facts
- Cloudflare has open-sourced its Cloudflare OS platform, an AI agent workspace for employees.
- The platform allows non-technical users to build applications by describing workflows in natural language.
- Cloudflare OS features a security framework with isolates and permission controls to mitigate risks.
- Thousands of Cloudflare employees use the platform daily for tasks like document creation and task automation.
- Deployment of the Cloudflare OS backend requires a subscription to the Workers Paid plan.
Cloudflare has open-sourced its internal AI agent workspace, Cloudflare OS, allowing employees, including those without coding experience, to build applications using natural language prompts. The platform is designed with a robust security framework to minimize risks associated with AI-generated code.
Developed over several months, Cloudflare OS enables employees to describe desired workflows, which AI agents then translate into applications. According to Cloudflare, thousands of employees use the platform daily for tasks such as document and slide creation, task automation, and data visualization. Principal engineer Kenton Varda stated that the platform's secure sandbox environment allows users to "go wild" without introducing significant security flaws.
The security model employs fine-grained app instances and 'isolates'—instances of the V8 JavaScript execution engine—which are significantly faster and more memory-efficient than traditional containers. AI agents begin with no permissions and must request access to resources. Server code runs with disabled outbound networking, and client code is sandboxed in the browser, limiting internet access to explicitly provided capabilities.
Cloudflare OS supports various AI models, allowing organizations to choose the most appropriate one for specific tasks. Chief Information Officer Sam Rhea noted that the platform has been refined to rely more on deterministic steps for workflow execution, using AI inference only when necessary. Administrators can monitor AI spending, set budgets, and implement rate limits.
Cloudflare shared lessons learned from its internal use, including the realization that general-purpose coding tools are not ideal for knowledge work requiring one-off outputs. The company also established the Engineering Codex, an "authoritative guide," to help both human engineers and AI agents review code and adhere to engineering standards. Systems engineer Timo Reimann reported that the AI code reviewer has flagged numerous deviations and blocked thousands of code merges.
While Cloudflare OS is open-source, deploying its backend requires a subscription to the Workers Paid plan. This requirement was initially not clearly communicated, leading to user frustration. Cloudflare has since updated its deployment process to alert users upfront about the paid plan necessity.