Cloudflare launched CloudflareOS this week, an open-source AI workspace designed to give employees secure access to company systems without exposing API keys. The platform promises a secure environment where workers can use AI tools and internal applications through a single interface, aiming to bridge the gap between general AI models and specific company operations. Positioned significantly beyond the notion of legacy virtual desktop infrastructure (VDI) services, which delivered the same fixed applications through a remote screen—and even past the dynamic application delivery and streaming of modern VDI iterations—this represents a more dynamic way of working with internal company tools, documents, and systems.
The technology addresses a fundamental issue with current enterprise AI. While modern tools know a lot about the world, they know almost nothing about a specific company’s internal systems, approval processes, or how teams actually get work done. This knowledge gap forces employees to start every session from zero, re-explaining context that the system should already understand. Rita Koslov, VP for developers & AI at Cloudflare, explains that powering up modern agent use cases often means data is leaving controlled systems en masse for the first time. Previously, people asked analytics questions in the data warehouse where the organization had control, but now employees are asking for API keys for their own tools and agents, creating a new class of security problems.
Related: Alibaba’s Qwen Model Criticized as Open Source in Name Only
To mitigate these risks, Cloudflare has built a capability-based access system that promises to be superior to handing agents raw API keys. Whereas API keys provide agents with broad access to systems, a capability-access-based approach grants one specific resource, records exactly what the agent observed, and verifies that anyone viewing the work is allowed to access the source. This architecture utilizes Dynamic Workers, which provide lightweight isolated runtimes to load each app’s code on demand, and Durable Objects Facets to give it isolated SQLite storage under the platform’s supervision. Outbound networking is disabled by default, and Gatekeepers—service-specific Workers that sit between CloudflareOS and external services—interpret and understand service APIs to expose only the resources explicitly granted by users.
