Cloudflare on Wednesday unveiled EmDash, which it described as “the spiritual successor to WordPress.” The security vendor positioned EmDash as a much more secure website builder that avoids the widespread cybersecurity issues with WordPress plugins. However, Cloudflare’s claims go beyond cybersecurity issues. The vendor argues that the nature of websites in 2026 is markedly different from the kind of website WordPress was designed to handle.
See also: Smart Slider 3 WordPress: Vulnerability affects thousands of sites
"WordPress powers over 40% of the internet. It's a huge success that has allowed anyone to become a publisher and has created a global community of WordPress developers. But the WordPress open source project will turn 24 this year," Cloudflare's announcement said.
«Hosting a website has changed dramatically over that time. When WordPress was born, AWS EC2 didn’t exist. In the intervening years, this task has gone from renting virtual private servers to sending a JavaScript package across a globally distributed network at almost zero cost. It’s time for the most popular CMS on the web to upgrade to take advantage of this change.»
Cloudflare's statement also suggested that it offers open source in a way that is potentially more open and flexible than WordPress' approach.
In an interview with Computerworld, Cloudflare senior product manager Matt Taylorsaid his team sees the project as the next wave of web development platforms.
See also: WordPress offers an in-browser website creator
Melody Brue, principal analyst for Moor Insights & Strategy, said she hasn’t seen many developers who aren’t already experienced with WordPress choose it to build websites, and she also sees AI agents never choosing WordPress unless they’re explicitly instructed to do so. Given how prevalent autonomous AI agents are today, the ability to be more welcoming to agent systems could prove to be a huge advantage.
When it comes to business website development strategies, however, things get a little more complicated, Brue said. Given how deeply they are already invested in WordPress code and plugins and the support environment, existing WordPress business users are not likely to move easily.
But the extensive legal battles from last year involving Automattic CEO Matt Mullenwegand the lawsuit with WP Enginemade some enterprise IT executives worried, once they realized how much control one person had over WordPress platforms.
See also: WordPress: Vulnerability in the User Registration & Membership plugin
Noah Kenney, principal consultant for Digital 520, said the future is likely to look much more attractive for an approach like EmDash than for the old WordPress. However, he noted that “viability is as much an ecosystem question as it is a technical one. EmDash, while architecturally superior, is essentially starting from scratch. Enterprise adoption will largely depend on migration tools, developer adoption, and whether Cloudflare can build a reliable ecosystem of plugins and integrations.”
