A first look at the TypeScript-powered, serverless CMS that wants to fix the web's biggest security problem.
The "WordPress Problem"
WordPress powers over 40% of the internet, but it’s 24 years old. As developers, we know the pain points:
Cloudflare just announced EmDash—a modern CMS built from the ground up to solve these exact issues.
What makes EmDash different?
1. Built with TypeScript & Astro
Unlike the PHP-heavy architecture of the past, EmDash is written entirely in TypeScript. It uses Astro under the hood, making it incredibly fast for content-driven sites.
2. Sandboxed Plugins (The Security Game-Changer)
In WordPress, a plugin has access to everything. EmDash runs each plugin in its own isolated Dynamic Worker (sandbox). A plugin can only do what you explicitly grant it permission to do in its manifest.
3. Serverless by Default
EmDash is built to run on Cloudflare’s global network. It scales to zero when there’s no traffic and handles massive spikes instantly without you managing a single VPS.
4. Native AI Support
It includes built-in Agent Skills and a Model Context Protocol (MCP) server. You can point an AI agent at your codebase, and it will understand how to build plugins or customize your theme automatically.
Why Full-Stack Developers Should Care
As someone working with modern stacks like Next.js and React, EmDash feels much more "natural" than legacy CMS platforms.
- Theme Development: Themes are just Astro projects.
- Database: Uses a modern, schema-first approach.
- Monetization: Built-in support for x402, a standard for pay-per-use content.
Final Thoughts
Is it time to migrate? EmDash is currently in a v0.1.0 preview. It might be early for production enterprise sites, but for developers looking to build secure, high-performance blogs or apps, it’s a project worth watching.
emdash-cms
/
emdash
EmDash is a full-stack TypeScript CMS based on Astro; the spiritual successor to WordPress
EmDash
A full-stack TypeScript CMS built on Astro and Cloudflare. EmDash takes the ideas that made WordPress dominant -- extensibility, admin UX, a plugin ecosystem -- and rebuilds them on serverless, type-safe foundations. Plugins run in sandboxed Worker isolates, solving the fundamental security problem with WordPress's plugin architecture.
Get Started
Important
EmDash depends on Dynamic Workers to run secure sandboxed plugins. Dynamic Workers are currently only available on paid accounts. Upgrade your account (starting at $5/mo) or comment out the worker_loaders block of your wrangler.jsonc configuration file to disable plugins.
npm create emdash@latest
Or deploy directly to your Cloudflare account:
EmDash runs on Cloudflare (D1 + R2 + Workers) or any Node.js server with SQLite. No PHP, no separate hosting tier -- just deploy your Astro site.
Templates
EmDash ships with three starter templates:
Blog
A classic blog with sidebar widgets, search, and RSS.
|
Check out the EmDash Repository
Are you sticking with WordPress, or are you ready to switch to a TypeScript-native CMS? Let's discuss in the comments!
Top comments (2)
EmDash looks promising, but it's still too early to say for sure: the architecture they've planned for their plugins is interesting, but for now, there's nothing concrete—in other words, we have to take their word for it, or wait and see (which is the wiser choice, in my opinion).
great effort by cloudflare