← → or space to navigate
/ OS
01 / 51
PARTNER BRIEFING · BUILD YOUR SERVICES PRACTICE

Cloudflare
OS

The platform for AI productivity.
The foundation for your next services practice.

Tze Yoong Tee
Principal Partner Architect, APJC
agentee.zeytee.com
City list: Cloudflare, https://www.cloudflare.com/network/. Approximate city-centre coordinates adapted from GeoNames, https://www.geonames.org/, licensed CC BY 4.0, https://creativecommons.org/licenses/by/4.0/. Connection arcs are illustrative.
01

Cloudflare

The connectivity cloud — one network, every layer.

GLOBAL SCALE

One network,
one control plane.

200+ cities for AI inference
Powers 1 in 5 Internet sites
234B+ cyber threats blocked / day
335+
Cities
125+
Countries
13,000+
Network interconnections
<50ms to 95%
of the world's Internet users

Published figures checked Oct 22, 2026 · Cloudflare network · Workers AI

THE COMPLETE PORTFOLIO

Connect. Protect. Build.

Cloudflare's connectivity cloud — one control plane across security, performance, and developer services.

SASE & Workspace Security
  • ZTNA (with MCP Server Portals)
  • SWG (with AI Usage Controls)
  • CASB (with AI Posture Management)
  • Email Security
  • Data Loss Prevention
  • Remote Browser Isolation
  • Digital Experience Monitoring
App Security & Perf Services
  • AI Security for Apps
  • Bot Management (with AI Crawl Control)
  • WAF with Rate Limiting
  • API Protection
  • Load Balancing
  • L7 DDoS Protection
  • CDN and DNS
  • Origin Shield
Developer Services
  • AI inference
  • AI Gateway
  • Agentic SDK and Workflows
  • Serverless compute
  • Full stack applications
  • Object & key-value storage
  • SQL database
  • Media optimization and delivery
Network Services
Network-as-a-ServiceFirewall-as-a-ServiceL3 & L4 DDoS ProtectionNetwork InterconnectSmart RoutingIDS/IPS

Cloudflare Programmable Global Network

◆ Artificial Intelligence / Machine Learning◆ Threat, Network Intelligence
THE PARTNER OPPORTUNITY

Cloudflare brings the platform.
You build the services.

Consulting
Cybersecurity
Cloud & application services
Managed services

Turn your industry expertise into customer solutions — connect enterprise systems, codify expert workflows and operate the capability over time.

02

Cloudflare OS

An AI productivity environment — the framework, the architecture, and a live look inside.

DEFINITION

An operating system
for AI productivity.

Originally built for internal use — now open source so any company can make it their own.

Built inside Cloudflare
Used company-wide
Apache 2.0 · Open Source
WHY NOW

Enterprise AI adoption
follows a pattern.

VISIBILITY

Shadow AI sprawl

Employees adopt dozens of tools; IT has no idea what's used or what data leaves the building.

SECURITY

Speed outpaces review

Vibe-coded apps ship to production before security ever sees them.

PRODUCTIVITY

Duplicate work

No shared direction — everyone re-solves the same problem, alone.

COST

Token spend unmanaged

Every employee, most expensive model, every task — with no budget controls.

CREDIBILITY

Cloudflare's own journey.

Dogfooded before it ever shipped.

MAY 2025

Gemini

Sanctioned LLM for writing tasks & thought partnership

JAN 2026

Opencode

Agentic workflows opened beyond R&D

MAY 2026

Cloudflare OS

Full agent harness, curated skills, built in

CORE PILLARS

Equip every team member
to do more.

One-Click Workspace

Full agent harness, seconds after login.

Context Layer

Institutional knowledge, centrally curated.

Secure System-of-Record Access

Scoped access to real data, tightly controlled.

Model Optionality

Right model, by role and task.

COST MECHANICS

Scaling productivity
without scaling cost.

Model optionality
Dynamic routing
Faster inference
Caching

Map roles and skill files to the right model — control spend without slowing anyone down.

ARCHITECTURE

Cloudflare's agentic workspace.

AI Inference

Model optionality

AI Gateway

AI Agent Workspace

Deployed or local harness

Deployed Apps & Agents

One-click environments

Content Library

Curated context + skills

Systems of Record

Salesforce · Jira · Email · Radar

loads skills + context
MCP Portal
enriched by
GOVERNANCE MODEL

A framework for where and how
team members build.

Most work starts here ↓
LAYER II

Cloudflare OS

Skills + Context
  • Ad-hoc research
  • Meeting prep
  • Document generation
Contribute improvements
LAYER III

Cloudflare OS Apps

Custom-Purpose Apps
  • Self-service forms
  • Team dashboards
  • Shared apps by URL
Alpha
LAYER IV

Centrally Managed

Rigid Business Logic
  • Deal desk tools
  • Compliance workflows
  • Canonical reporting
Team-owned + governed
LAYER V

Public Use

External Audience
  • Customer-facing tools
  • Partner demos
  • External microsites
Reviewed
FLEXIBLESTRUCTUREDREVIEWED
LAYER I

Systems of Record

Salesforce · Workday · ERP · Jira · Internal platforms
CLOUDFLARE OS 2.0 · PUBLIC RELEASE
RELEASEDAUGUST 5, 2026

Three months inside Cloudflare.
Then rebuilt for everyone.

V1 · MAY 2026 · INTERNAL

Proven internally

Private agent workspaces, shared context and skills — used company-wide.

→
V2 · AUGUST 5 · OPEN SOURCE

Built to belong to you

Deploy it, connect your systems and shape it around how your organization works.

PRIVATE WORKSPACES
→Collaborative, shareable apps
STATIC OUTPUTS
→Live, connected software
AGENT RERUNS
→Deterministic workflows
Security became part of the platform. Credentials stay isolated; access policy follows the data.
Source: Cloudflare Blog · August 5, 2026
CLOUDFLARE OS 2.0 · OPEN SOURCE

A real operating system,
built on Cloudflare's own stack.

Traditional OSShell
workshop-frontend React single-page app — chat, gadget canvas, connections & action-approval UI.
Cap'n Web RPC / WebSocket
Traditional OSKernel
workshop-backend · Overseer DO Workspace state · capability-based security · queued actions with configurable approval.
Durable Objects · SQLite
Traditional OSDevice drivers
Gatekeepers Per-vendor Workers as credential custodians — GitHub, Google, Slack, Notion, MCP & more.
Workers · DO Facets
Traditional OSProcesses
Gadgets · from Blueprints One private, sandboxed app instance per user — internet-disabled, real-time collaborative.
Dynamic Worker Facets
Traditional OSno equivalent
AI Agents · Code Mode Agents write & execute code against typed Gatekeeper + Gadget APIs — the new primitive.
Workers AI · AI Gateway
github.com/cloudflare/cloudflare-os Open source · Apache 2.0 — fork it, self-host it, make it yours.
✳

Cloudflare OS
in Action

See it work — then how your teams put it to use.

SEE IT WORK · 01

Turn information
into answers.

Prepare a briefing or investigate a question using connected resources — the agent searches, filters and analyzes data for the task.

Click to play · Cloudflare demo
SEE IT WORK · 02

Create docs, slides
and spreadsheets.

Draft a business review, build a planning sheet or create a presentation — with outputs that can stay connected to their sources.

Click to play · Cloudflare demo
SEE IT WORK · 03

Build connected apps
for your team.

Move beyond a spreadsheet: create a shared dashboard, intake tool or team workspace tailored to the way your business works.

Click to play · Cloudflare demo
SEE IT WORK · 04

Run deterministic
workflows.

Automate repeatable steps; use a model where judgment adds value. Run on demand, on a schedule, or from supported integration events.

Click to play · Cloudflare demo
STANDARD GATEKEEPERS

Connect your tools.
Scope every connection.

19 standard Gatekeeper packages in the public repository — connect the resources your workflow needs.

Google

One integration, eight services

GmailDriveDocsSheetsSlidesCalendarChatBigQuery

Knowledge & teamwork

  • Slack
  • Notion
  • Confluence
  • Linear
  • ZoomInfo

Developer & data

  • GitHub
  • GitLab
  • Cloudflare
  • Supabase
  • MCP servers
  • MCP Server Portals

Other integrations

  • Home Assistant
  • Spotify
  • X
  • Email Workers*
PreinstalledContext & SkillsSchedulerWeb Search

Connections depend on configured credentials and resource permissions. *Email Workers requires manual Email Routing setup.
Source: standard packages · Installation defaults

03

AI Security
& Governance

Control who can act, what they can access, and how AI is used.

THE FULL SUITE

Cloudflare's AI Security Suite.

One platform, four categories — spanning Zero Trust, Application Security, and the Developer Platform.

01

Protect workforce use of AI

Discover & control how employees interact with genAI tools like ChatGPT and Claude.

SASE for AI
02

Protect agentic AI access

Secure interactions between AI agents and corporate resources.

ZTNA + MCP Server Portals
03

Protect AI-powered apps

Defend chatbots and AI apps against data loss and attacks.

AI Security for Apps
04

Build securely with AI

Build AI apps and agents for internal or customer use.

AI Gateway

Highlighted: relevant controls for a Cloudflare OS architecture. Partners design the integration and policy scope for each customer.

TECHNICAL ARCHITECTURE

Model agnostic.
Secure by default.

LLMs
ChatGPTCursorWorkers AI
User
Cloudflare OS
Codex
Reqs.SkillsRFCs
CLOUDFLARE
AI Gateway
Remote MCP servers
MCP server portals
ZTNA (Access)
Internal services
ClickHouseSnowflake
SaaS MCP Servers
Slack · Salesforce · Jira · PayPal · Shopify · GitHub
1
click the diagram to step through the four components →
PILLAR 04 · AI SECURITY / COST / PERFORMANCE

AI Gateway

One control plane between your apps and any LLM — for security, cost governance, and performance.

Guardrails & DLP — security
Caching & rate limiting — cost
Dynamic routing — performance
Full request logging — visibility
Solves: Token cost + Shadow AI visibility + model lock-in
PILLAR 04 · AI SECURITY / COST / PERFORMANCE

AI Gateway — the control plane
for every LLM call.

Apps & Agents
Skills · harness · deployed agents
↓
Cloudflare AI Controls
Cloudflare's control plane for AI traffic
AI Gateway MCP Server Portals Zero Trust Network Access
Cloudflare Workers AI
External Inference

Cost-efficient AI usage for every employee:

Model optionality

Control model usage without lock-in risk.

Dynamic routing

Map employee roles and skill files to specific models.

Faster inference

Faster, more cost-efficient inference.

Caching

Save token spend on at-scale usage.

PILLAR 03 · PROTECT AI-POWERED APPS

AI Security for Apps

Formerly Firewall for AI — a WAF-integrated detection layer for your own AI-powered, customer-facing apps.

LLM endpoint discovery
Prompt injection score (1–99)
PII detection, 37 categories
Unsafe topic detection

Model-agnostic, runs inline at the edge — the bidirectional counterpart to AI Gateway's outbound DLP.

PILLAR 02 · PROTECT AGENTIC AI ACCESS

Remote MCP Servers

Host MCP remotely — instead of locally on developer devices.

No ambient credentials on laptops
Centrally managed & monitored
Smaller local attack surface
PILLAR 02 · PROTECT AGENTIC AI ACCESS

MCP Server Portals

A governed portal for internal services & SaaS apps — capability-based, not ambient.

Identity-aware MCP access
Tool policies
Access visibility

Portals govern MCP access. Cloudflare OS Gatekeepers separately scope resources and queue actions for approval.

GitHub and GitLab actions support opt-in auto-approval. GitHub merges and approving reviews remain manual; force-push has a separate permission.

Solves: Dev-speed-vs-review + Shadow AI visibility
PILLAR 02 · PROTECT AGENTIC AI ACCESS

ZTNA (Access)

Enforce Zero Trust policies to authenticate and authorize every request.

Build on your Cloudflare One controls where deployed — extend governed access to AI workflows.
BACK TO WHERE WE STARTED

Every pain point,
accounted for.

VISIBILITY

Shadow AI sprawl

↓
AI Gateway + MCP Portal
SECURITY

Speed outpaces review

↓
Gatekeepers
PRODUCTIVITY

Duplicate work

↓
Shared skill library
COST

Token spend

↓
AI Gateway
04

Developer Platform

What Cloudflare OS is actually built on.

DEVELOPER MOMENTUM

Developer adoption is
accelerating.

Cloudflare developer adoption: one million to more than ten million Reported developers building on Cloudflare: more than one million on May 14, 2023; two million on March 31, 2024; more than ten million on October 20, 2026. Both axes are linear. Connecting segments are visual guides, not measured intermediate values or a fitted growth model. Plus-marked figures are plotted at their reported threshold. DEVELOPERS BUILDING ON CLOUDFLARE 10M 5M 0 1M+ 2M 10M+ 14 MAY 2023 31 MAR 2024 20 OCT 2026

Reported milestones · linear scales · connecting lines are visual guides · “+” plotted at reported threshold.
Sources: Cloudflare · May 2023 · March 2024 · October 2026 announcement

PLATFORM SNAPSHOT

The right primitives.
One platform.

Cloudflare OS uses a slice of this — extend the platform with your own integrations, applications and managed services.

COMPUTE
WorkersDynamic WorkersPagesContainersWorkers for Platforms
STATE & STORAGE
Durable Objects + FacetsR2Workers KVD1HyperdriveQueues
AI
AI Gateway*Workers AI*VectorizeAI SearchAgents SDK
BROWSER & MEDIA
Browser Run · exportsRealtimeStreamImages
AUTOMATION/OPS
WorkflowsSandbox (@cloudflare/sandbox)Secrets StoreBasin Pipelines†
Orange = reference implementation
Blue = optional analytics hook
Gray = broader platform

*AI routing depends on configuration; Workers AI also provides document conversion and web search. Browser Run handles Gadget exports and can be omitted.
†Basin Pipelines (formerly Pipelines): optional PRODUCT_ANALYTICS binding; absent from the default release configuration.
Audited Oct 22, 2026 · public source a679442 (Oct 20) · Bindings · AI routing · Analytics hook · Product names

FOUNDATION

Built on Workers,
by the Workers team.

WORKSPACE DURABLE OBJECT

One OverseerDurableObject per workspace

Access checks · orchestration
strongly consistent workspace state
SUPERVISOR

Workspace supervisor

Controls capabilities, orchestrates agents and manages Gadget and Gatekeeper facets.

Own SQLite database
WORKER LOADERLoads the Gadget's exported class
GADGET FACET

AI-built application

Dynamic Worker code; no direct outbound network access.

Isolated SQLite
INTEGRATION WORKERSupplies a Gatekeeper class
GATEKEEPER FACET

Governed connection

Scopes remote-service access and mediates actions.

Isolated SQLite
CLOUDFLARE WORKERS RUNTIMEParent + facets are co-located; SQLite stores remain isolated

Source: Gadget loading & facets · Gatekeeper facets · Facet storage model

THE HARDER QUESTION

The right foundation
for connected AI.

Agents are a different workload than websites — they chain tool calls, wait on LLMs, and need to run close to whatever they're calling.

DESIGN NEED
WHAT YOUR WORKFLOW NEEDS
CLOUDFLARE FOUNDATION
Execution
Run generated app code in isolation
Workers + Dynamic Workers
State
Coordinate shared, interactive work
Durable Objects + isolated facets
AI traffic
Choose models and govern requests
AI Gateway + model providers
Access
Connect approved systems and users
Gatekeepers + configured Zero Trust

Complement your existing cloud investments. Deep managed ML training and GPU pipelines remain hyperscaler strengths; this foundation focuses on serving and securing connected AI workflows.

ARCHITECTURE, NOT ASSEMBLY

Purpose-built,
not assembled from parts.

On traditional cloud, an agent means stitching together six services before writing any agent logic.

Compute service
Database
Message queue
Container runtime
Secrets manager
API gateway

On Cloudflare, it's one integrated framework:

Agents SDK
Durable Objects — state lives with the agent
Workflows — durable retries + human-in-the-loop
THE PRICING ARGUMENT

Pay for thinking,
not for waiting.

Agents spend most of their time waiting — on the LLM, on a human approval, on a scheduled trigger.

Traditional VM / container
alive 24 hours
24 hours
Cloudflare Durable Object
alive 24 hours, hibernates when idle
10 seconds

Workload illustration, not a price quote: CPU billing tracks compute, while Durable Object duration depends on activity and hibernation. Requests, storage, models and other service charges also apply.

THE NEW PRIMITIVE · CODE MODE

Don't call tools —
write code.

Models are trained to write code. So give the agent one code tool, not fifty — it writes a plan that runs in a sandbox and returns only what matters.

DIRECT TOOL CALLS

Every step round-trips the model

LLM→ tool→ LLM→ tool→ LLM→ tool
CODE MODE

One program composes it all in-sandbox

LLM→ code  ·  many calls  ·  one result
fewer hops less repeated model orchestration
// the model writes this — not 5 separate tool calls
const projects = await codemode.list_projects({ status: "active" });
const blocked = [];
for (const p of projects)
  blocked.push(...await codemode.list_tasks({ projectId: p.id }));
return blocked.filter(t => t.status === "blocked");

A Developer Platform primitive — code runs in an isolated Dynamic Worker, so credentials stay out of the model context. On MCP server portals, Code Mode is on by default.

05

Build solutions.
Grow your services practice.

Your expertise connects the platform to customer outcomes — from first use case to ongoing operations.

WHAT YOU CAN BUILD A PRACTICE AROUND

Six services.
One connected practice.

01 · ADVISE

AI readiness & discovery

Customers need a valuable starting point. Prioritize workflows, assess access and establish a baseline.

Deliver: use-case backlog + pilot brief
02 · CODIFY

Context & skills engineering

Expert knowledge is scattered. Turn trusted sources and working practices into maintained skills.

Deliver: validated context + skill library
03 · CONNECT

Enterprise integration

Agents need governed data access. Configure Gatekeepers and MCP; build custom connectors where needed.

Deliver: scoped, tested system connections
04 · BUILD

Apps & automation

Generic chat cannot finish every job. Build connected Gadgets, team applications and repeatable workflows.

Deliver: tested apps + workflow blueprints
05 · GOVERN

Security & governance

Controls must match the workflow. Design identity, resource scope, approval policy and usage visibility.

Deliver: control design + operating runbooks
06 · OPERATE

Managed AI operations

Systems and knowledge change. Maintain integrations, curate skills and review model usage and quality.

Deliver: support + improvement reviews
WHO DOES WHAT

One platform.
Clear responsibilities.

Cloudflare · platform

Compute, storage and AI primitives
Security and access capabilities
Open-source Cloudflare OS reference
Product documentation and enablement

You · services

Discovery and solution design
Context, integrations and custom apps
Deployment and control configuration
Adoption, support and improvement

Customer · ownership

Business priorities and success criteria
Data owners and access authorization
Policy decisions and output validation
Service acceptance and rollout decisions

Agree account ownership, deployment responsibilities and support boundaries for each engagement.

SERVICE SPOTLIGHT · CONTEXT & SKILLS ENGINEERING

Turn customer expertise
into reusable capability.

Business Knowledge
Customer-approved sources
Expert Workflows
How experts do the work
↓
Partner + Customer Experts
Select, structure and validate
↓
Shared Context + Skills
Reusable collections with scoped sharing
↓
AI Agent Workspace
Surfaced and ready-to-use in Cloudflare OS

Capture expert practice, validate it with the customer and maintain it as a service.

1

Select trusted knowledge

Identify owners, approved sources and access boundaries.

2

Capture expert practice

Document the steps, decisions and exceptions that matter.

3

Package reusable skills

Give agents task instructions and relevant business context.

4

Validate with customer teams

Check output quality, permissions and human review.

5

Maintain and improve

Update skills as customer systems and processes evolve.

YOUR KNOWLEDGE ENGINEERING DELIVERABLES

Two file types,
one knowledge layer.

Skill File

The customer's repeatable way of working — expressed as task instructions.

Example: prepare a weekly account review
Steps, checks and escalation conditions
Reusable across customer-authorized teams
One page ideal · .md

Context File

The customer's business knowledge — available where the task needs it.

Example: products, terminology and service guidance
Approved reference material and business rules
Owned and maintained with customer subject experts
One–two pages · .md
A REPEATABLE DELIVERY MOTION

From first workflow
to ongoing service.

Scope the engagement around customer readiness, deliverables and clear decision points.

01

Discover

QUALIFY VALUE
Workflow and owner
Readiness and baseline
Agreed pilot brief
02

Design

AGREE THE SCOPE
Architecture and access
Data and model choices
Acceptance criteria
03

Build

PROVE THE WORKFLOW
Skills and integrations
Apps and control tests
Customer validation
04

Operate

ACCEPT INTO SERVICE
Runbooks and ownership
Support and releases
Usage and quality reviews
05

Expand

SCALE WITH EVIDENCE
Measured pilot outcomes
Next workflow backlog
Reusable solution patterns

Each stage ends with an agreed customer decision. Timeline, staffing and support terms follow the actual scope.

PROVE CUSTOMER VALUE

Measure what
matters to the customer.

Establish the baseline with the customer first. Use the scorecard in service reviews and expansion decisions.

Workflow efficiency

Completion time, manual steps and human review effort per task.

Quality and adoption

Output acceptance, corrections, repeat usage and user feedback.

Cost per task

Model, platform and service costs against delivered value.

Governance fit

Resource scope, approvals, access reviews and operating ownership.

Evidence before expansion. Targets are agreed for the customer's workflow during discovery. Productivity gains and savings are measured, not assumed.

THE PARTNER BUSINESS MODEL

Deliver a project.
Build a recurring relationship.

01 · PROJECT SERVICES

Establish the capability

Discovery, architecture, integration, context engineering and application delivery.

Commercial model: scoped project fee.
02 · MANAGED SERVICES

Operate and improve

Integration maintenance, skills curation, usage reviews, user support and controlled releases.

Commercial model: recurring service fee.
03 · REUSABLE SOLUTIONS

Scale your expertise

Develop industry workflow patterns, connector packages and validated delivery accelerators.

Commercial model: packaged implementation.

Illustrative engagement structures; agree scope and service terms with the customer.
Track model and platform consumption separately from your services fees.

06

Build it internally.
Take it to customers.

Start with one workflow, prove your delivery approach and package a repeatable offering.

YOUR FIRST PARTNER PILOT

Prove it in
your own business.

1

Select one internal workflow

Choose a repeated task, name its owner and capture the current baseline.

2

Deploy and connect a scoped environment

Use the public repository and deployment guide. Configure approved integrations, identity and review controls.

3

Measure it and document the pattern

Validate outputs and operating effort. Capture a demo, runbook and customer-facing service brief.

Cloudflare OS v2 is an Early Access release. Use the pilot to validate fit and operational readiness.
Local quick start · Deploy to your Cloudflare account · Deployment starter

PREPARE YOUR DELIVERY TEAM

Build the capability.
Package the offering.

ENABLE

Train your practitioners

Build skills across Workers, access controls, integrations and workflow design. Use Cloudflare University for technical learning.

PACKAGE

Define the service

Document the customer problem, deliverables, prerequisites, acceptance criteria and ongoing support boundary.

ENGAGE

Align the first opportunity

Work with your Cloudflare partner team on the customer use case, technical validation and next engagement.

Build: Cloudflare OS repository · Developer documentation · Reference architectures
Enable & engage: Cloudflare University · Partner Portal

NEXT STEP

Your expertise.
Your next services practice.

Combine Cloudflare's platform with the workflows, integrations and operating expertise your customers need.

MOVE 01

Prove it internally

Run one internal workflow. Validate the controls, measure the outcome and document your delivery playbook.

MOVE 02

Build a customer offering

Package the service, align a customer pilot and define how you will operate and improve it over time.

Align one pilot with your Cloudflare partner team

Got a question? Ask agentee.zeytee.com