Cloudflare makes its AI app-building platform open source

Cloudflare has released its internal AI-powered app development platform, Cloudflare OS, as open-source software. The platform was originally built for employees who aren't professional coders, letting them describe tasks in plain language while an AI agent turns those descriptions into working applications.

The company says it spent months developing and testing the system internally before making it available on GitHub, as announced in an August 5 blog post. According to Cloudflare, thousands of its employees use the platform daily to create documents and slides, automate repetitive work, and build small data-visualization tools.

A key selling point is the security framework, which is designed to prevent the risks often associated with "vibe coding" — where non-developers use AI to generate code that might contain vulnerabilities. Kenton Varda, a principal engineer at Cloudflare, said on X that the sandbox is secure enough that users can "go wild" without introducing serious security bugs, and that security teams can confidently allow non-technical staff to build apps.

The security model works by running each app instance in its own isolated sandbox. For example, a document editor would run each document separately, with permissions managed per instance. This approach uses Cloudflare's existing Dynamic Workers feature, which relies on V8 JavaScript engine "isolates" rather than traditional containers. These isolates start in milliseconds and use only a few megabytes of memory, making them 100 times faster and 10 to 100 times more memory-efficient than standard containers.