WordPress is not obsolete yet, but Cloudflare just released the platform that could eventually replace it. EmDash launched in beta on April 1, 2026, and at first glance, it looks like WordPress rebuilt from scratch for a world where AI does most of the development work. At TJ Digital, where we manage websites for roughly 40 to 50 clients, website development has been the one area where most of the work still has to be done by a human. EmDash changes that. We are already building sites on it, and I want to explain why.
EmDash is not a finished product. It doesn’t have the plugin ecosystem, the theme marketplace, or the developer community that WordPress has built over two decades. If your site depends on WooCommerce, a membership plugin, or a complex page builder, you can’t switch to EmDash today. But for content-driven websites like marketing sites, blogs, and portfolio pages, EmDash solves the exact problems that have made WordPress so difficult for AI to work with.
What Is Cloudflare EmDash?
EmDash is an open-source CMS built entirely in TypeScript and powered by Astro 6.0. Astro is the frontend framework whose team Cloudflare acquired in January 2026. In their EmDash announcement post, Cloudflare describes it as the “spiritual successor to WordPress,” and that framing is accurate. When you log in, the admin panel looks exactly like WordPress. You have content types, an admin UI, a media library, authentication, and a plugin system. The difference is everything underneath.
WordPress runs on PHP and MySQL. EmDash runs on TypeScript and deploys as serverless infrastructure on Cloudflare Workers. WordPress themes use a mix of PHP templating and JavaScript. EmDash themes are standard Astro projects with routes, components, and styles. If you have worked with any modern frontend framework in the last few years, EmDash theming will feel familiar immediately.
This matters because AI coding tools are trained heavily on modern JavaScript and TypeScript. They struggle with the blend of PHP execution, hook-based architecture, and legacy patterns that make up a typical WordPress site.
Why WordPress Doesn’t Play Nice with AI
We love WordPress. All the websites we’ve built are on WordPress. Most of our clients’ sites are on WordPress. But the truth is it really doesn’t play well with AI, and I’ve been saying this for a while.
WordPress plugins hook directly into the core execution flow through actions and filters. Themes can run arbitrary PHP through functions.php, which WordPress itself describes as acting like a plugin. When you combine multiple plugins, a complex theme, and the block editor, you get a runtime environment where an AI agent has to reason about global state, hook interactions, and plugin conflicts all at once.
For an AI assistant, making a safe change to a WordPress site is like performing surgery in the dark. The agent can’t be sure that updating one thing won’t break three others. This is why, despite using AI for nearly everything else at our agency, AI-assisted web development has lagged behind.
How EmDash Makes AI Development Actually Work
The thing I am most excited about by far is the AI integration. EmDash was designed from the ground up so that AI agents can build, update, and maintain the website directly. It provides three tools that make this possible.
Agent Skills are documentation files that ship with every EmDash instance. They describe plugin capabilities, hooks, and how to structure plugins and themes. Instead of an AI agent guessing how the CMS works, it reads the skills and follows project-specific conventions.
The EmDash CLI handles database setup, type generation, content CRUD, schema management, and media operations. It outputs JSON by default when piped, which means an AI agent can parse the results and use them programmatically. Running npx emdash types generates TypeScript definitions from the live schema. Running npx emdash dev starts a local dev server with automated database migrations.
A built-in MCP server exposes every action available in the admin UI as a structured tool call. This means you can connect Claude or any MCP-compatible platform and manage the site using the same set of actions you would perform manually, but through structured, reliable tool calls instead of brittle UI automation.
You can develop, update, and maintain the website directly from Claude. It is hard to overstate how much this will unlock.
Is EmDash More Secure Than WordPress?
Security is where EmDash makes its strongest case. WordPress plugin vulnerabilities are not a minor problem. Patchstack’s 2026 whitepaper reports that 11,334 new vulnerabilities were discovered in the WordPress ecosystem in 2025. That’s a 42% increase over 2024. Of those, 91% were in plugins. More high-severity vulnerabilities were found in 2025 than in the previous two years combined.
The core issue is architectural. WordPress plugins share the same execution context as the CMS itself. A vulnerable plugin can access the database, the filesystem, and everything else. There is no isolation.
EmDash takes a fundamentally different approach. Every plugin runs in its own sandboxed Worker isolate with a declared capability manifest. Think of it like app permissions on your phone. A plugin has to declare what it needs access to, and the platform enforces those boundaries. Themes cannot perform database operations at all, which eliminates an entire class of risk that WordPress themes carry through functions.php.
EmDash also uses passkey-based authentication by default instead of passwords, removing brute-force and credential-stuffing as attack vectors.
| Feature | WordPress | EmDash |
| Plugin isolation | None. Plugins share full CMS execution context | Each plugin runs in a sandboxed Worker isolate |
| Plugin permissions | Full access to database and filesystem by default | Declared capability manifest (like OAuth scopes) |
| Theme code execution | Themes can run arbitrary PHP via functions.php | Themes cannot perform database operations |
| Authentication | Password-based by default | Passkey-based by default |
| 2025 ecosystem vulnerabilities | 11,334 new vulnerabilities (91% in plugins) | Too new to measure, but architecture reduces blast radius |
| Codebase | PHP + MySQL | TypeScript + serverless (Cloudflare Workers) |
| AI development surfaces | WP-CLI, REST API (site-specific setup) | Agent Skills, CLI with JSON output, built-in MCP server |
Can EmDash Replace WordPress Without the Plugin Ecosystem?
A lot of people in the WordPress community are saying this is why EmDash is going to fail. It won’t be able to compete with WordPress because it doesn’t have the community. And they’re right about the numbers. WordPress powers about 42.5% of all websites. The official plugin directory has thousands of free plugins. The theme directory has over 14,000 free themes.
But I really don’t think that’s going to be enough to keep EmDash from disrupting WordPress. Here’s why.
The software that used to require plugins is now trivially easy to build with AI. Need a contact form? AI can build one in minutes. Need a custom content type with specific fields? That’s exactly what AI coding assistants are best at. EmDash doesn’t need a community that rivals WordPress to compete. It just needs a handful of really savvy developers.
Where the ecosystem gap still matters is in complex, battle-tested solutions like ecommerce, LMS platforms, membership sites, multilingual support, and deep third-party integrations. These represent years of edge-case handling, compliance work, and operational knowledge that AI can’t replicate overnight.
What Does EmDash Cost?
EmDash itself is open-source and MIT-licensed. You can run it on any Node.js server. But the security headline, sandboxed plugins via Dynamic Workers, depends on Cloudflare’s infrastructure. Dynamic Workers are currently available only on paid accounts starting at $5 per month.
The bigger cost advantage is the deployment model. Cloudflare positions EmDash as “scale-to-zero” serverless software. Your site only bills for CPU time spent doing work. When no one is visiting, you’re not paying for idle compute. Compare that to WordPress, where most hosting requires always-on servers regardless of traffic.
For agencies managing many small sites, this could be a significant cost reduction. For a single high-traffic WordPress site with complex plugin requirements, switching to EmDash might increase short-term costs because you would need custom development to replace plugin functionality.
Should Your Business Switch to EmDash Right Now?
Not yet, for most businesses. EmDash is a v0.1 beta. It launched three days ago. The architecture is promising, but production maturity takes time.
Here’s how I’m thinking about it at my agency. For new builds where the site is content-driven and we’re comfortable with custom development, we’re starting to build on EmDash now. For existing WordPress sites that depend on established plugins, we’re staying on WordPress and watching closely.
The businesses that should pay attention are agencies and developers who want to prepare for AI agents. EmDash is the first CMS that treats AI as a first-class user of the system, and that is a massive advantage that will compound over time.
Other Questions About Cloudflare EmDash
Is EmDash free to use?
EmDash is open-source under the MIT license, so the software itself is free. Running it on Cloudflare with sandboxed plugin security requires a paid account starting at $5 per month. You can also run it on any Node.js server without Cloudflare, but you lose the plugin sandboxing.
Can I migrate my WordPress site to EmDash?
EmDash includes documentation for porting WordPress themes and plugins. AI agents can generate a reasonable first draft of a ported plugin given the original WordPress code and EmDash’s Plugin API docs. Complex plugins with deep WordPress dependencies will likely need multiple rounds of iteration. There is no one-click migration tool.
Does EmDash work with Cloudflare’s free tier?
You can deploy an EmDash site on Cloudflare, and Cloudflare does offer a generous free tier for Workers. However, Dynamic Workers, which are required for sandboxed plugin security, are only available on paid plans.
What frontend framework does EmDash use?
EmDash is powered by Astro 6.0. Themes are standard Astro projects with routes, components, and styles. If you have experience with React, Vue, or any modern frontend framework, the learning curve is minimal.
Will EmDash replace WordPress for small businesses?
Not today. WordPress has an enormous ecosystem advantage with thousands of plugins, themes, and developers. EmDash is best suited right now for content-driven sites built by teams comfortable with TypeScript and AI-assisted development. Over time, as the ecosystem grows and AI fills more of the plugin gap, EmDash could become a viable replacement for a much larger share of WordPress use cases.
Start Building for AI Search Today
Whether you’re on WordPress or considering EmDash, the most important thing for your business right now is making sure AI platforms can find and recommend you. That’s what we do at TJ Digital. Reach out to us and let’s talk about your AI visibility strategy.