Cloudflare created WordPress for AI clients

Cloudflare, the cloud provider that connects millions of websites to the Internet, wants to “fix” another digital giant: WordPress. They’ve announced a new open source system, called EmDash, that’s supposed to address “fundamental problems that WordPress can’t solve” — and they want to do this by letting AI agents take control of your website.

Although it’s still in early access, EmDash is already generating buzz in the WordPress community, and not just because its interface looks like WordPress with a facelift. Cloudflare calls EmDash the “spiritual successor” to WordPress — something WordPress founder Matt Mullenweg has already done It was refuted in a blog post about the new platform. “Please do not claim to be our spiritual successor without understanding our soul,” Mullenweg writes. “I think EmDash was created to sell more Cloudflare services.”

Other members of the online WordPress community jumped in to pick EmDash as well, while also drawing attention to the ways the WordPress project should be improved — especially when it comes to issues surrounding architecture, security, and AI adoption.

In its advertisementCloudflare claims to have rebuilt the open source WordPress project “from the ground up,” offering a built-in Model Context Protocol (MCP) server, which allows large language models (LLMs) to communicate and interact with the platform’s documentation. It runs on Astro, Cloudflare’s LLM-friendly web building framework, and uses TypeScript, Programming language Which AI agents can understand better. EmDash even supports x402a tool that web publishers can use to make AI crawlers pay for access to their content.

Brian Cordes, a developer advocate at Automattic, which owns WordPress.com, Notes One of EmDash’s strengths is the speed with which you can build a website, saying, “Going from scratch to basic design is fast. I mean, really fast.”

“But it seems a bit coded,” Cordes writes. Mullenweg echoes this, Write on his blug that the interface “falls into the uncanny valley of being kind of un-WordPress-like,” adding that he knew “it wasn’t a weekend vibecode project, but it has some of that smell to it.” EmDash is powered by artificial intelligence, Mullenweg admits The skills feature is a nice touchbut he didn’t address the deeper issues holding WordPress back — something other community members have been vocal about in light of EmDash’s launch.

Joost De Valk, creator of the popular Yoast WordPress plugin, Imdash calls “The most interesting thing to happen to content management in years,” it is designed to work with the support of AI agents and comes with structured content that “machines can easily analyze and process.” in His post is about EmDashDe Valk brings up structural issues in WordPress that the project continues to treat as “cosmetic.”

References De Valk Posted by WordPress developer Hendrik Luehrsenwho wrote that EmDash “exposes an ancient vulnerability” in the current WordPress editor, Gutenberg, which stores data in HTML format. Lohrsen argues that this architecture becomes a problem when developers have to rework content, manipulate it through different interfaces, or port it to other systems.

“The real lesson is that we must now think about content on the web differently,” says Lohrsen. “As long as content is fundamentally understood as output, HTML as a storage format can seem good enough. But once content moves into new contexts through APIs, multiple front-ends, personalization, and AI systems, that logic no longer holds.”

But not everyone agrees with Cloudflare’s claim that EmDash solves a “security crisis” surrounding WordPress plugins. Cloudflare He cites data from Patchstackwhich states that “more high-risk vulnerabilities were discovered in the WordPress ecosystem in 2025 than in the previous two years combined.” As explained by Cloudflare, WordPress plugins run a PHP script that “links directly to WordPress to add or modify functionality,” meaning it theoretically has access to everything on your site. Instead, EmDash plugins use something called Dynamic Workers – a tool that allows AI agents to execute code in their own isolated environment, protecting the rest of your site if something goes wrong.

Long-time WordPress developer Rhys Wynne explains In a blog post These issues may be exaggerated in order to sell EmDash. “I should note that although vulnerabilities are discovered, with systems like Patchstack, they are usually patched before they become a problem, and if you actually read the patch notes, the ‘security crisis’ is often something that requires a login, or means that a blog subscriber can tick a checkbox that they shouldn’t,” Win writes. “They definitely need to be fixed, but they are using scary words to scare users.”

Meanwhile, the fact that plugins “can change every aspect of your WordPress experience is a feature, not a bug,” Mollenweg says. De Valk Resists Mullenweg’s viewSaying it’s like “arguing that since some mobile apps need camera access, every app should have root access to the phone.” He says in his own blog that there is an argument in favor of a “detailed permissions system” within WordPress, not “continuing to give each plugin the keys to the entire database.”

EmDash is already trying to attract users from WordPress by making it easier to import sites from the platform. But, as Wayne pointed out, if things go south, there doesn’t seem to be a way Export Your site from EmDash and disengage the site from Cloudflare’s infrastructure. “There is no intention of Cloudflare abandoning EmDash currently, but it is possible that it will do so at a later date. What happens next if it is abandoned?” Wayne says Edge.

While some WordPress members, including De Valk, say they will rely on EmDash, concerns remain about whether EmDash actually has a community to support new users. WordPress is supported by thousands of volunteers, along with developers at Automattic, to create new features for the platform. “When something breaks, there are forums, documentation, tutorials, and developers everywhere who know how to fix it,” said Miriam Schwab, division president. WordPress is written in Elementor. “With all these decades of content, contribution, and usage, an MBA has all the knowledge needed to design, build, and troubleshoot WordPress sites.”

However, Schwab admits that EmDash is “pushing the WordPress ecosystem to honestly look at how it does things” — and that’s exactly what it’s doing now. Just one day before the launch of EmDash, announced Matthias Ventura of Automattic The project is delaying the launch of WordPress 7.0 “by a few weeks to finalize key architectural details.” Besides supporting real-time collaborative editing, This update It will include an AI client and an API that will allow WordPress to communicate with AI models.

Even the most skeptical WordPress members are optimistic about the prospect of change. “If WordPress starts making the right architectural decisions now, it can still catch up,” De Valk wrote. This may make EmDash more of a catalyst for WordPress, rather than a true competitor.