In April 2026, Cloudflare introduced EmDash — a brand-new, open-source content management system designed to be the spiritual successor to WordPress. Built entirely in TypeScript, EmDash reimagines what a CMS can be when you start from scratch with modern web architecture, serverless infrastructure, and security-first plugin design.

If you've been following the CMS space, this is a big deal. WordPress powers over 40% of the Internet, but its age is showing. EmDash aims to carry forward the best parts of WordPress — open source, community-driven, easy publishing — while fixing the fundamental problems that WordPress can't solve without breaking backward compatibility.

Why a new CMS?

WordPress was born in 2003, before AWS EC2 even existed. Back then, hosting a website meant renting virtual private servers. Today, you can deploy a globally distributed site by uploading a JavaScript bundle at virtually no cost. The gap between what WordPress was designed for and what modern infrastructure offers has been growing for years.

EmDash is built for this new world. It's serverless by default, runs on Cloudflare's edge network using V8 isolates, and scales to zero when there's no traffic — meaning you only pay for actual compute time. But it's not locked to Cloudflare; you can run EmDash on any Node.js server.

Sandboxed plugins: solving WordPress's biggest security problem

The single biggest innovation in EmDash is its plugin architecture. In WordPress, plugins are PHP scripts that hook directly into WordPress's core — they have full access to the database, the filesystem, and the network. This is why 96% of WordPress security vulnerabilities come from plugins.

EmDash takes a completely different approach. Each plugin runs in its own isolated sandbox — a Dynamic Worker. Instead of giving plugins direct access to everything, EmDash provides them with specific capabilities via bindings, based on what the plugin declares it needs in its manifest.

For example, a plugin that sends an email when content is published would declare two capabilities: read:content and email:send. The plugin literally cannot do anything else — no network access, no database queries, no filesystem access beyond what's explicitly granted. You know exactly what a plugin can do before you install it.

Built on Astro

Under the hood, EmDash is powered by Astro, the fastest web framework for content-driven websites. EmDash themes are Astro projects that include pages, layouts, components, styles, and a seed file that tells the CMS what content types and fields to create.

This means creating themes is familiar to anyone who has worked with modern frontend frameworks. And because Astro is increasingly popular — and well-represented in LLM training data — AI coding agents can help you build and customize EmDash themes effectively.

Key features at a glance

  • Open source, MIT licensed — no GPL restrictions, use it however you want
  • TypeScript-native — the entire CMS is written in TypeScript
  • Serverless — scales to zero, runs on Cloudflare Workers or any Node.js server
  • Sandboxed plugins — each plugin runs in its own isolate with declared capabilities
  • Astro-powered theming — modern frontend development experience
  • x402 payment support — built-in monetization for the AI agent era
  • Passkey authentication — no passwords to leak, no brute-force attacks
  • MCP server & CLI — manage your CMS programmatically or via AI agents
  • WordPress import — migrate existing WP sites with a few clicks

x402: built-in monetization for the AI era

EmDash has built-in support for x402, an open standard for Internet-native payments. This means any EmDash site can charge for access to content without requiring subscriptions — clients (including AI agents) send a request, receive a 402 Payment Required response, pay on-demand, and get access. Every EmDash site has a built-in business model for the AI era.

AI-native CMS management

EmDash is designed to be managed by AI agents. It includes Agent Skills that describe available capabilities, an EmDash CLI for programmatic interaction, and a built-in MCP (Model Context Protocol) server. This means you can use your favorite AI assistant to migrate content, build plugins, create themes, and manage your site.

How to get started

EmDash is currently in v0.1.0 preview. You can try it out right now:

  • Play with the admin interface in the EmDash Playground
  • Create a new site locally: npm create emdash@latest
  • Deploy to Cloudflare with one click from the GitHub repository

Or, if you'd rather skip the infrastructure setup entirely, sign up for DeployEmDash — we'll handle hosting, SSL, edge deployment, and Git-based workflows so you can focus on your content.