WordPress powers over 40% of the Internet and turns 24 this year, yet it was designed for a pre-cloud computing era. Cloudflare has unveiled EmDash, a serverless JavaScript CMS built on Astro 6.0.
The plugin security problem
96% of security issues for WordPress sites originate in plugins. EmDash solves this by running plugins in isolated sandboxes using Dynamic Workers with capability-based permissions.
Serverless architecture
EmDash leverages v8 isolate architecture to achieve instant scaling and zero-cost idle periods.
Modern frontend with Astro
Themes leverage Astro component-based architecture. EmDash themes cannot perform database operations, eliminating WordPress theme-based vulnerabilities.
AI-native CMS
EmDash includes Agent Skills, EmDash CLI, and an MCP Server for AI integration.
Breaking marketplace lock-in
EmDash decouples security from licensing. Plugins can carry proprietary licenses since they execute in secure sandboxes.
EmDash is TypeScript, MIT licensed, v0.1.0 preview.
