Cloudflare Unveils ‘EmDash,’ a Serverless Alternative to WordPress

Cloudflare has announced the launch of EmDash, a new open-source content management system (CMS) developed as a modern, secure alternative to WordPress. The platform is currently available in early developer preview.

EmDash represents a fundamental shift in how websites are built and managed, moving away from traditional server-based architectures toward a serverless model. Unlike WordPress, which requires provisioning and maintaining servers, EmDash runs on serverless infrastructure that scales automatically based on demand and charges only for actual compute usage.

The system is built using modern web technologies, including a TypeScript-based architecture and the Astro framework, enabling developers to create content-driven websites with improved performance and flexibility. It can run on Cloudflare’s global network or be deployed on other environments, giving organisations flexibility in hosting.

A key differentiator is its security-first design. EmDash isolates plugins in separate execution environments with restricted permissions, reducing the risk that vulnerabilities in one component can compromise an entire site. This addresses a longstanding issue in traditional CMS platforms, where third-party plugins often introduce security risks due to broad system access.

"WordPress’ plugin architecture is fundamentally insecure. 96% of security issues for WordPress sites originate in plugins. In 2025, more high severity vulnerabilities were found in the WordPress ecosystem than the previous two years combined," Matt Taylor, Cloudflare Senior Product Manager and Matt Kane, Cloudflare Senior Principal Systems Engineer, wrote in a blog post.

Cloudflare also highlighted improvements in scalability and cost efficiency. The platform’s serverless architecture allows it to scale down to zero when not in use and instantly handle spikes in traffic without pre-provisioned infrastructure.

The launch comes as WordPress continues to dominate the CMS market, powering more than 40% of websites globally, but also facing ongoing challenges related to security, complexity and maintenance.

EmDash is designed to simplify website development while integrating modern capabilities such as structured content storage and compatibility with AI-driven workflows. Industry observers see the move as part of a broader shift toward edge-native and serverless web platforms.

With EmDash, Cloudflare is positioning itself not just as an infrastructure provider but as a key player in the evolving web development ecosystem, aiming to redefine how content management systems are built and secured.

"You can run EmDash anywhere, on any Node.js server — but on Cloudflare you can run millions of instances of EmDash using Cloudflare for Platforms that each instantly scale fully to zero or up to as many RPS as you need to handle, using the exact same network and runtime that the biggest websites in the world rely on," they said.