Cloudflare open-sources Cloudflare OS, its internal agent platform
Cloudflare open-sourced Cloudflare OS, the agent-and-app platform thousands of its own staff use daily, shipping two GitHub repositories any organization can deploy on its own Cloudflare infrastructure. Agents start with access to nothing and reach internal systems only through Gatekeeper Workers that hold credentials separately and enforce policies such as masking sensitive fields and requiring approvals. Apps run as Dynamic Workers with outbound networking disabled, each backed by an isolated SQLite database, so a developer gets a governed agent runtime without hand-rolling the permission layer.
Source: blog.cloudflare.com ↗
Security had to be part of the platform, not something every person building an app or using an agent has to implement correctly.
Why this matters
- → Enterprises can deploy AI agents internally with security baked into the platform, not retrofitted.
- → Teams share curated context and skills so agents don't reinvent solutions each run.
- → Agents get policy-controlled access to internal systems without handing out API keys.