Cloudflare open-sources Cloudflare OS, the agent workspace it built to run its own workforce

Cloudflare has open-sourced Cloudflare OS, the agent-workspace platform it built to run its own workforce, releasing the code on GitHub under the Apache 2.0 license on August 5, 2026.

The company describes Cloudflare OS as ‘an open platform for agents, apps, and work.’ It began as an internal tool that Cloudflare rolled out company-wide starting in May 2026; thousands of employees now use it daily to run research, build documents wired to live data, automate tasks and assemble working apps, the company said.

Cloudflare OS runs on Cloudflare Workers, the company’s serverless platform, with SQLite-backed apps and an Agent Workspace that opens in a browser with no terminal required. Its security model, called Gatekeepers, lets a system’s owners control what AI agents can see and change — and agents start with zero permissions by default, an opt-in posture aimed at the risk of autonomous software acting where it should not.

Cloudflare published the source on GitHub as cloudflare/cloudflare-os. Organizations can adopt it directly or through implementation partners including Presidio and Happy Cog.

Open-sourcing an internal workplace platform is a bid to make Cloudflare’s stack the substrate other companies build their agent workflows on, rather than a productivity app sold seat by seat. The permissions-first design is the more interesting claim, since most agent platforms bolt on controls later. Whether default-deny survives contact with users who want agents to just get things done, without drowning in permission prompts, is the open question.