Cloudflare Open-Sourced an Operating System for Agents
Cloudflare kicked off its Agents Week on August 5 with the biggest swing yet: Cloudflare OS, an Apache 2.0 open-source AI workspace, at github.com/cloudflare/cloudflare-os. The announcement post (blog.cloudflare.com/cloudflare-os) hit 408 points on Hacker News the same day.
What is it? Not an OS in the kernel sense. It starts as a conversation in your browser, but every conversation is grounded in the context and skills your organization has curated, and the agent can write and run code in an isolated runtime, reach your internal data through a governance framework, and build small personal apps that people share and keep modifying. Three layers: agent workspace, security and governance, modifiable apps. Cloudflare gave a first version to every employee in May. By August, thousands of them were using it daily for docs, slide decks, busywork automation, and internal tools. This is the dogfooded thing, rebuilt and released.
The supporting cast tells you how serious this is. The same week, cloudflare/computer ("give your agent a computer") jumped 796 stars in a day: a virtual filesystem living in a Durable Object backed by SQLite, with three pluggable execution backends, from a full Linux container mounted over FUSE down to a just-bash isolate. And Cloudflare Wallets launched on Product Hunt as "the programmable wallet for the agentic Internet." Workspace, computer, money. That is a full stack for agents, shipped in one week.
The contrast is the point. OpenAI has ChatGPT Work. Notion has Ship OS. Microsoft has Copilot. All closed, all trying to become the surface where enterprise work happens. Cloudflare just put an equivalent surface on GitHub under Apache 2.0 and said: run it yourself, we sell the infrastructure underneath. For a company whose actual product is Workers and Durable Objects, giving away the workspace to sell the compute is not generosity, it is positioning. Whoever owns the layer where agents meet company data owns the next decade of enterprise software, and Cloudflare would rather nobody own it than let OpenAI own it.
← Back to all articles
What is it? Not an OS in the kernel sense. It starts as a conversation in your browser, but every conversation is grounded in the context and skills your organization has curated, and the agent can write and run code in an isolated runtime, reach your internal data through a governance framework, and build small personal apps that people share and keep modifying. Three layers: agent workspace, security and governance, modifiable apps. Cloudflare gave a first version to every employee in May. By August, thousands of them were using it daily for docs, slide decks, busywork automation, and internal tools. This is the dogfooded thing, rebuilt and released.
The supporting cast tells you how serious this is. The same week, cloudflare/computer ("give your agent a computer") jumped 796 stars in a day: a virtual filesystem living in a Durable Object backed by SQLite, with three pluggable execution backends, from a full Linux container mounted over FUSE down to a just-bash isolate. And Cloudflare Wallets launched on Product Hunt as "the programmable wallet for the agentic Internet." Workspace, computer, money. That is a full stack for agents, shipped in one week.
The contrast is the point. OpenAI has ChatGPT Work. Notion has Ship OS. Microsoft has Copilot. All closed, all trying to become the surface where enterprise work happens. Cloudflare just put an equivalent surface on GitHub under Apache 2.0 and said: run it yourself, we sell the infrastructure underneath. For a company whose actual product is Workers and Durable Objects, giving away the workspace to sell the compute is not generosity, it is positioning. Whoever owns the layer where agents meet company data owns the next decade of enterprise software, and Cloudflare would rather nobody own it than let OpenAI own it.
Comments