EmDash vs WordPress on Cloudflare
EmDash replaces WordPress; HostlessWP moves it. EmDash is Cloudflare's new open-source CMS, written in TypeScript on Astro, and a good choice for a new site. If you already have a WordPress site and want it on Cloudflare without rebuilding the theme or replacing plugins, HostlessWP runs that same WordPress, with its MySQL database, on Cloudflare Workers.
What EmDash is
Cloudflare announced EmDash on April 1, 2026 as "the spiritual successor to WordPress" and released EmDash 1.0 on September 28, 2026, together with a plugin registry. From Cloudflare's own posts:
- A new codebase. Written entirely in TypeScript, MIT licensed. "No WordPress code was used to create EmDash."
- Built on Astro. A theme is an Astro project. Cloudflare's agent skills include guidance for porting WordPress themes, but the theme is rebuilt, not reused.
- Sandboxed plugins. Plugins run in their own isolate through Dynamic Workers and get only the capabilities they declare and you approve.
- Content import from WordPress. Through a WXR export or the EmDash Exporter plugin, including media and custom post types.
- Runs on Cloudflare or any Node.js server.
Sources: Introducing EmDash and EmDash 1.0 on the Cloudflare blog, read October 16, 2026.
Side by side
| EmDash | HostlessWP | |
|---|---|---|
| What it is | A new CMS | A way to run your existing WordPress on Workers |
| Your content | Imported (WXR or the EmDash Exporter plugin) | Stays in your MySQL, nothing to import |
| Your theme | Rebuilt as an Astro project | Unchanged |
| Your plugins | Replaced with EmDash plugins (TypeScript) | Unchanged; top 30 tested, 9 with limits |
| Editors | Learn the EmDash admin | Same WordPress admin and logins |
| Plugin isolation | Each plugin sandboxed | As in WordPress; code is read-only |
| Built for AI agents | MCP server, CLI and agent skills built in | Whatever your WordPress plugins provide |
| Maturity | 1.0 (September 2026) | Early preview, v0.1 |
| License | MIT | GPL-2.0-or-later, like WordPress |
| Where it runs | Cloudflare or any Node.js server | Cloudflare Workers |
Plugin security, honestly
EmDash's main argument is plugin security: a WordPress plugin is PHP with full access to the database and file system, and Cloudflare cites that 96% of security issues for WordPress sites originate in plugins. EmDash plugins run in a sandbox with declared permissions. HostlessWP does not change that part of WordPress.
What HostlessWP does change is where a compromise can live. There is no server, SSH or control panel to break into; plugin, theme and core files are read-only and come from the deploy; uploads are never run as PHP. A backdoor written into a PHP file disappears with the instance. A vulnerable plugin can still change what is in your database, so plugin updates still matter. More on the security model.
Which one to pick
EmDash fits when
- You are starting a new site
- Your team builds with Astro or TypeScript
- The site is mostly content, without plugins you depend on
- Sandboxed plugins matter more than the WordPress ecosystem
- You want AI agents to edit content through MCP
HostlessWP fits when
- You have a running WordPress site to move
- The theme, a page builder or WooCommerce is the site
- Editors should keep the admin they know
- You want Cloudflare without a rebuild project
- You want to be able to move back by pointing the domain at your old host
Using both
They are not exclusive. Moving to HostlessWP first leaves your content in WordPress and MySQL, so a later move to EmDash is the same import it would have been from your old host. You can take the server off your hands now and decide on a rebuild later, without doing both at once.
Questions
What is the difference between EmDash and WordPress?
EmDash is a new open-source CMS from Cloudflare, written in TypeScript and built on Astro, with sandboxed plugins. It does not run WordPress code: themes are Astro projects and plugins are written for EmDash. WordPress sites move to it by importing their content.
Can I run WordPress on Cloudflare without switching to EmDash?
Yes. HostlessWP runs your existing WordPress, with its theme, plugins and MySQL database, on Cloudflare Workers. See Can you host WordPress on Cloudflare?
Do WordPress plugins work in EmDash?
No. EmDash plugins are TypeScript modules that run in their own isolate with declared permissions. WordPress PHP plugins have to be replaced or rebuilt.
Is HostlessWP made by Cloudflare?
No. HostlessWP is an independent open-source project. EmDash is Cloudflare's.
Keep your WordPress, lose the server
Try it on a copy of your site. Nothing changes on your current host.