Cloudflare OS open source: agents, security and governance for business autonomy

Cloudflare Releases New Version of Cloudflare OS as Open Source

Cloudflare has made a new version of Cloudflare OS available as open source, a platform that provides each employee with an agent, a workspace, and tools to develop small applications. The solution integrates an agent workspace, a security and governance layer based on "Gatekeepers," and a system for distributing personal applications that function as Cloudflare Workers.

Quick Answer

A Platform Born for Internal Use

The first version of Cloudflare OS was developed internally by the company. In May, the company extended access to the platform to all of its thousands of employees. According to CEO Matthew Prince, non-technical employees began using the platform to draft documents, create presentations, and automate repetitive tasks. Now, Cloudflare has decided to open-source a rebuilt version that any organization can deploy and connect to its own internal systems.

Integrated Security as a Key Element

Cloudflare OS combines three main components. The first is an agent workspace that roots every conversation in the context and curated skills of the company, with an isolated runtime where the agent can write and execute code. The second component is a new security and governance framework in this version that stands between the agents and the company's record systems. Finally, there is a layer for customizable personal applications that allows a workspace to transform a chat into a document, a workflow, or a full-stack small application.

An Innovative Approach to Permission Management

Cloudflare's CIO, Sam Rhea, explained how the company addressed security in this agent-based experiment. According to Rhea, granting broad and long-term API keys to people and agents is dangerous and not scalable, as these keys offer broad access that is difficult to limit or audit. In Cloudflare OS, agents start with access to nothing. They then request a specific resource and a Gatekeeper, a Cloudflare Worker specific to the service, mediates the access. The credential never touches the agent or its code.

An Advanced Security Model

The security model implemented by Cloudflare OS is more advanced than that offered by the Model Context Protocol (MCP) alone. MCP tells the agent which tools it can call, but not which underlying resources it has actually seen. Cloudflare OS logs every observation and verifies a person's access before they can open a workspace or view what an agent has produced.

Real Applications and Integration with Cloudflare Workers

Every application that an agent builds is a true Cloudflare Worker, based on Dynamic Workers and Durable Object Facets developed for this project, which communicates with the client through Cap'n Web, Cloudflare's open-source object-capability RPC system. As the announcement post highlights, "if you can build a tool to do a job for yourself, agents can use your tool to do the job when you're not there."

Considerations on Security and Open Source

Despite the strong and innovative vision, some users might remain skeptical. Cloudflare OS is a Cloudflare product, so the agents, apps, and governance it sells to run everything live on Cloudflare's edge. The "open" in open source gives you the code, but the runtime is still controlled by a central entity. This centralized approach could raise concerns about data privacy and governance in scenarios where organizations prefer fully decentralized solutions.

Implications for Companies Seeking Secure Automation Solutions

For companies looking for secure automation solutions, Cloudflare OS represents an interesting opportunity. The platform offers a way to automate business processes without compromising the security of sensitive data. However, organizations must carefully weigh the pros and cons of using a solution that, despite being open source, remains under the control of a single provider.

Future Perspectives and Integration with Other Tools

While Cloudflare OS is currently focused on internal automation, its potential could extend further. In the future, the platform might integrate third-party tools, allowing agents to access an even wider range of resources and data. This expansion could make Cloudflare OS an even more powerful platform for business automation, provided that security and governance concerns are adequately addressed.

Cloudflare OS represents a significant step in the evolution of business automation platforms. With its innovative approach to security and the ability to automate a wide range of tasks, the platform offers a promising alternative to traditional solutions. However, organizations must carefully consider the security and governance implications before adopting this technology.