Cloudflare launches EmDash as alternative to WordPress

EmDash is a new content management system from Cloudflare. It serves as the spiritual successor to WordPress.

Cloudflare built EmDash from the ground up with AI coding agents over the past two months. The project is fully open source under the MIT licence and available on GitHub. No WordPress code was used in its creation.

EmDash is written entirely in TypeScript. It runs in a serverless design but can also run on own hardware or any chosen platform. It uses the Astro web framework under the hood.

Plugins in EmDash run in their own isolated sandbox called a Dynamic Worker. Each plugin declares its required capabilities in a manifest. This gives a strict guarantee that the plugin can only perform the declared actions. The approach solves the security issues in the WordPress plugin system.

In 2025 more high severity vulnerabilities appeared in the WordPress ecosystem than in the previous two years combined. Ninety six percent of security issues for WordPress sites come from plugins.

EmDash themes use Astro for pages, layouts, components and styles. Themes cannot perform database operations.

Every EmDash site includes built-in support for the x402 standard. This allows charging for content access on a pay-per-use basis without subscriptions.

EmDash scales to zero on serverless platforms such as Cloudflare Workers. It bills only for actual CPU time used.

The system offers passkey authentication by default and supports pluggable authentication with role-based access control. Users can import existing WordPress sites through a WXR file or the EmDash Exporter plugin.

EmDash provides tools for AI agents including Agent Skills, a CLI and a built-in MCP server. These help with content management and customisation.

Version 0.1.0 preview is available now. Developers can deploy it to a Cloudflare account or any Node.js server. A playground lets users try the admin interface.

https://blog.cloudflare.com/emdash-wordpress/