Cloudflare has launched EmDash, an open-source MIT-licensed CMS built on Astro 6.0 and TypeScript, positioned as a modern successor to WordPress. The key innovation is plugin security: each plugin runs in an isolated Cloudflare Dynamic Worker sandbox with explicitly declared capabilities via bindings, eliminating the fundamental security flaw where WordPress plugins have unrestricted access to the database and filesystem. EmDash is serverless, scales to zero, supports passkey authentication, has built-in x402 payment support for AI-era monetization, includes an MCP server for agent-driven management, and supports WordPress content migration. It is available as a v0.1.0 developer preview deployable to Cloudflare or any Node.js server.
Table of contents
What WordPress has accomplishedSolving the WordPress plugin security crisisSolving plugin security means solving marketplace lock-inEvery EmDash site has x402 support built in — charge for access to contentSolving scale-to-zero for WordPress hosting platformsModern frontend theming and architecture via AstroAn AI Native CMS — MCP, CLI, and Skills for EmDashPluggable authentication, with Passkeys by defaultImport your WordPress sites to EmDashTry itSort: