Cloudflare has open-sourced Cloudflare OS, an internal platform that lets employees describe workflows in natural language and have AI agents turn them into small apps. The company says thousands of employees already use it for documents, slides, task automation, and data visualization.
The important part is the security model. Cloudflare says each app instance can run in a separate sandbox, with access managed at the instance level. The system uses V8 isolates through Dynamic Workers rather than conventional containers, which the company says start faster and use less memory.
Agents begin without permission to reach company data or external resources and must request capabilities through the platform. Server code runs with global outbound networking disabled, while client code runs in a sandboxed browser frame. Administrators can also monitor inference spending and set budgets or rate limits.
No sandbox is a guarantee, and recent research has shown boundary bypasses in several AI coding agents. Cloudflare’s bet is that non-developers will build more internal tools, so companies need a controlled environment rather than pretending informal AI-generated apps will not happen.