Cloudflare just dropped EmDash, will it take over for WordPress?
Bold claim. Let’s talk about it.
Their pitch hits two pain points every WordPress user knows too well: security and speed. And honestly? They’re not wrong about the problems.
96% of WordPress security issues come from plugins. In 2025 alone, more high-severity vulnerabilities were found in the WordPress ecosystem than the previous two years combined. That’s not a great trend line.
EmDash’s answer is sandboxing every plugin in its own isolated environment so a compromised plugin can’t take down your whole site. It’s serverless, written in TypeScript, and built on Cloudflare Workers meaning it spins up instantly, scales to zero when nobody’s visiting, and you only pay for actual CPU time.
Sounds great on paper. But here’s where I pump the brakes.
The key security feature, plugin isolation. only fully works on Cloudflare’s infrastructure. Run it anywhere else and you’re just using a TypeScript CMS without the thing that makes it special. That’s not open source freedom. That’s architectural lock-in with a nice MIT license slapped on it.
Then there’s the elephant in the room: WordPress powers 40%+ of the internet. That ecosystem the themes, the plugins, the developers, the hosting providers, the documentation took over two decades to build. Cloudflare built EmDash in two months with AI agents. I don’t care how good the AI is, you don’t replicate 20+ years of community infrastructure in 60 days.
They announced it on April Fool’s Day and had to clarify it wasn’t a joke. That tells you something about how the market received it.
I’ve been in this space for nearly two decades. I’ve watched “WordPress killers” come and go — Wix, Squarespace, Ghost, Webflow, you name it. WordPress is still here. Not because it’s perfect. Because the switching costs are massive and the ecosystem is unmatched.
Will EmDash carve out a niche with developers who are already building on Cloudflare Workers? Probably. Will it replace WordPress for the average business owner, blogger, or agency? Not anytime soon.
Cool technology. Interesting architecture. But mass adoption? I’ll believe it when I see it. Read more here how Cloudflare can destroy your PBN