WordPress has been the backbone of the web for over two decades. It powers more than 40% of all websites, has an enormous ecosystem of plugins and themes, and has enabled millions of people to publish online. It would be dishonest to pretend any new CMS can simply replace that overnight.
But EmDash isn't trying to replace WordPress — it's trying to be what WordPress would look like if it were built today, with modern infrastructure, security models, and developer tooling. Here's an honest, side-by-side comparison.
Architecture
WordPress
WordPress is a PHP monolith. It requires a web server (Apache or Nginx), PHP, and a MySQL/MariaDB database. Every request is processed server-side, and the application runs as a single process with shared state. This architecture made perfect sense in 2003, but it means you always need a running server — even when nobody is visiting your site.
EmDash
EmDash is built entirely in TypeScript and designed to be serverless. On Cloudflare, it runs on V8 isolates that spin up instantly per request and scale to zero when idle. You only pay for actual CPU time. It can also run on any Node.js server if you prefer traditional hosting.
Verdict: EmDash has a clear architectural advantage for cost efficiency and scalability. WordPress has the advantage of decades of battle-tested stability and a massive knowledge base for troubleshooting.
Plugin security
WordPress
WordPress plugins are PHP scripts that hook directly into the core application. They have unrestricted access to the database, filesystem, and network. This is the root cause of 96% of all WordPress security vulnerabilities. The WordPress.com marketplace manually reviews plugins, but the queue is often 800+ plugins deep with a two-week wait.
EmDash
Each EmDash plugin runs in its own isolated sandbox (a Dynamic Worker). Plugins must declare exactly what capabilities they need in a manifest — like read:content or email:send — and they can only access those specific capabilities. There's no way for a plugin to access the database directly, read the filesystem, or make network requests unless explicitly granted.
Verdict: EmDash's sandboxed plugin model is a fundamental security improvement. This isn't a patch or a best practice — it's an architectural guarantee that WordPress simply cannot offer without a complete rewrite.
Theming & frontend
WordPress
WordPress themes use PHP templates mixed with HTML, CSS, and JavaScript. The functions.php file acts as an all-purpose execution environment. Themes are powerful and flexible, but they carry similar security risks to plugins since they can execute arbitrary PHP.
EmDash
EmDash themes are Astro projects — pages, layouts, components, and styles. There's a clean separation: themes handle presentation, the CMS handles data. Themes cannot perform database operations directly. This makes them safer and more predictable.
Verdict: WordPress themes offer incredible flexibility built over 20+ years. EmDash themes offer a modern developer experience with better security boundaries. If you're already comfortable with React, Vue, or Svelte components, EmDash will feel more natural.
Plugin licensing & ecosystem
WordPress
WordPress is GPL-licensed, and because plugins integrate so deeply with WordPress code, many argue they must also carry the GPL license. This creates a dependency on centralized marketplaces for distribution and trust. The ecosystem is massive — tens of thousands of plugins — but marketplace lock-in is real.
EmDash
EmDash is MIT-licensed, and because plugins run independently in sandboxes, they can have any license the author chooses. This opens up a more flexible ecosystem similar to npm or PyPI. The downside? The ecosystem is brand new. There are very few plugins and themes available today.
Verdict: WordPress has an unmatched ecosystem. EmDash has a better licensing model, but it will take years to build a comparable library of plugins and themes. This is probably the single biggest practical advantage WordPress holds right now.
Content management
WordPress
The WordPress editor (Gutenberg) is a block-based editor with a huge library of block types. Custom content types require plugins like Advanced Custom Fields, and they're stored in a shared posts table. WordPress's admin interface is mature and well-understood by millions of users.
EmDash
EmDash lets you define custom schemas directly in the admin panel, creating separate database collections for each content type. It includes a WordPress importer that can migrate posts, pages, and media. The admin interface is clean and modern, but it's less mature and has fewer features than WordPress's.
Verdict: WordPress has a more mature editing experience. EmDash has a cleaner data model for custom content types. If your needs are straightforward, both work well. For complex content modeling, EmDash's approach is more elegant.
Performance & hosting
WordPress
WordPress requires pre-provisioned servers. Performance optimization typically involves caching layers, CDNs, and careful server tuning. Managed WordPress hosting (WP Engine, Kinsta, etc.) solves many of these problems but adds cost.
EmDash
On Cloudflare, EmDash runs at the edge — your content is served from 300+ locations worldwide with automatic scaling. There's no server to provision or tune. On a Node.js server, performance characteristics are more traditional but still benefit from EmDash's efficient TypeScript architecture.
Verdict: EmDash on Cloudflare offers superior out-of-the-box performance and simpler scaling. WordPress with good managed hosting can match the performance but requires more configuration and typically costs more.
AI & automation
WordPress
WordPress has a REST API and WP-CLI for programmatic access. There's a growing ecosystem of AI plugins, but they're add-ons rather than core features.
EmDash
EmDash is built to be AI-native. It includes Agent Skills for AI assistants, a CLI for programmatic management, and a built-in MCP (Model Context Protocol) server. You can use AI agents to migrate content, build plugins, and manage your site out of the box.
Verdict: EmDash is clearly ahead here. AI-native CMS management is a first-class feature, not an afterthought.
The bottom line
Choose WordPress if you need a proven platform with a massive ecosystem, thousands of plugins and themes ready to use, and you're comfortable managing PHP-based infrastructure or using managed WordPress hosting.
Choose EmDash if you want modern architecture, better security guarantees, serverless deployment, and you're comfortable being an early adopter of a v0.1.0 product. EmDash is the future-facing choice, but it's honest to say it's early days.
If you're interested in EmDash but don't want to deal with infrastructure setup, sign up for DeployEmDash — we'll make deployment as simple as pushing to Git.