Cloudflare releases open-source AI workspace Cloudflare OS

Cloudflare has released Cloudflare OS, an open-source AI workspace it says was originally built for its own workforce and is now available to any organization. The code is on GitHub, and organizations can deploy it directly to their Cloudflare account via https://os.cloudflare.app/deploy. A managed deployment option through the Cloudflare dashboard is planned for later. Systems integrators including Presidio and Happy Cog are listed for customized implementations.

The company's stated rationale is that typical enterprise AI tools have broad world knowledge but little knowledge of how a specific company operates, and each session starts from scratch. Building a tailored alternative can reportedly take years and cost millions to maintain.

Cloudflare says thousands of its employees use the workspace daily for research, documents connected to live data, automated workflows, and building small working applications. The key mechanism is a set of governed connectors called Gatekeepers, giving owners of each internal system precise control over what the AI can see, what it can change, and when human approval is required before execution.

On security, Cloudflare OS is built on Cloudflare Access. Agents start with zero permissions and receive access only as needed for a specific task. On cost management, it routes through Cloudflare AI Gateway, allowing organizations to mix model providers, set budgets and rate limits per person, team, or app, and push routine tasks to smaller models.

Because the software runs in an organization's own Cloudflare account, the company emphasizes that organizations own what they build—processes, context, and internal system connections aren't locked into a vendor's closed product. Cloudflare frames this as a deliberate counter to platform lock-in.

The announced effectiveness figures—years of development cost avoided, daily internal usage, and the "no developer required" building experience—are Cloudflare's own, via CEO Matthew Prince and Happy Cog's Matt Weinberg, both quoted in the announcement. What's available now is the open-source code and documentation of the security model. The managed experience and partner implementations haven't been delivered yet.

The open question is whether the architecture generalizes. Cloudflare OS was designed for a workforce already operating on Cloudflare's network. For organizations with legacy systems, the Gatekeeper connectors will carry the load. Their behavior with real-world enterprise systems will test whether the "no developer required" promise holds outside a connectivity cloud company. The open-source release at least makes those assumptions inspectable before the managed option arrives.