Cloudflare has open-sourced Cloudflare OS, an internal-work platform where employees can create and customize small applications with AI assistance. Instead of running one shared application for everyone, each document or app instance operates as a separate sandbox called a Gadget.
Access to external systems is provided through explicit capabilities rather than broad production tokens embedded in generated code. The platform's Gatekeeper controls which user and Gadget can receive each capability, helping isolate one employee's customized app from another. Cloudflare says this model emerged after workers began building unvetted automation that required powerful credentials.
The architecture does not eliminate every risk. Incorrectly granted capabilities, unsafe connectors or sensitive information placed inside an authorized Gadget can still cause harm. Administrators must review permissions and monitor what the apps do. The useful shift is that customization no longer requires changing a central software service: users run their own copy while the platform enforces isolation. Organizations can inspect the open-source implementation before deciding whether that trade-off fits their security model.