Cloudflare debuts EmDash to challenge aging WordPress with AI-native CMS – News

Twenty-four years ago, two young coders launched a fork of the b2/cafelog log code called WordPress, a content management system for the then-emerging blogging world that over two decades later has grown into the most-used CMS on the planet.

Though WordPress is now estimated to power around 40% of sites on the internet, not only spawning Automattic Inc., the company behind WordPress.com, but also supporting millions of sites, it was built in a vastly different era. Today, it doesn’t reflect modern technology and coding standards, leaving the door open for new players and alternatives.

Enter Cloudflare Inc., which today announced the launch of EmDash. It’s an open-source CMS that is designed as a modern alternative to WordPress, built to reflect how websites are now deployed and operated on distributed infrastructure.

Designed using artificial intelligence-assisted coding workflows and intended to align with serverless and edge-based architectures, EmDash targets structural limitations in WordPress, particularly its plugin model, where third-party extensions often have broad access to core systems and data.

One of the ongoing issues with WordPress over the years has been plugins, which are responsible for the majority of WordPress vulnerabilities and create a persistent attack surface across sites that rely on them. Cloudflare’s offering takes a different approach to WordPress by isolating plugins within sandboxed environments. It enforces explicit permission controls over what each plugin can access to prevent a single compromised plugin from affecting the broader system.

EmDash was built using TypeScript and leverages modern frameworks such as Astro, with an architecture designed to run across distributed networks rather than centralized servers. The new CMS is compatible with Node.js environments and is optimized for deployment on Cloudflare’s global edge network, reducing reliance on conventional hosting stacks.

The new offering also introduces AI-native capabilities that are designed to allow EmDash to be managed programmatically by AI agents for tasks such as content migration, restructuring and schema changes. Those have typically been handled through manual workflows or one-off scripts.

The new CMS provides structured context and interfaces to allow agents to automate repetitive CMS operations, including updating content fields, reorganizing data and adapting existing site structures.

EmDash includes components such as agent skills that define available capabilities, plugin hooks and guidance for extending functions, along with a command-line interface that enables programmatic interaction with both local and remote instances.

Each deployment also includes a built-in Model Context Protocol server, allowing agents to perform administrative actions such as content management, media uploads and schema updates through standardized interfaces equivalent to those available in the administrative user interface.

On the authentication side, EmDash uses passkey-based authentication by default, meaning there are no passwords to leak and no brute-force vectors to defend against.

How fast it might catch on is uncertain. Roger Williams, community manager at web hosting provider Kinsta , told News in an email that this is less a mass-migration moment than a signal of where the CMS market is heading.

“This is way too complex of a tool for the majority of WordPress users to switch to but it is interesting to see a large company like Cloudflare throw their hat into the CMS ring,” he said. “They are making some interesting proposals for security and marketplace independence, and it’s an AI-first application. Even if adoption is low, this does help to set the bar higher for the WordPress project to build toward.”

EmDash is being offered fully open-source with an MIT license and is available now on GitHub.

Image: Cloudflare