Cloudflare opens waitlist for fully managed Cloudflare OS agent workspace

Cloudflare has opened a waitlist for fully managed deployments of Cloudflare OS, the company-wide agent workspace it announced a month ago. According to the Cloudflare blog, thousands of organizations have already picked up the open-source version since that launch, and the managed option is aimed at the ones that want the product without running it themselves.

What Cloudflare OS does

Cloudflare OS gives each person in an organization an agent workspace that knows how the company operates and connects to its data and systems. The blog describes the target use case as repetitive knowledge work — reviewing an account in the CRM, checking recent support tickets and product usage, then assembling a short presentation — the kind of task that might recur dozens of times a month and can be delegated to an agent instead. Users can ask an agent to handle a task, build a tool for their team, or shift between the two as the work changes.

Cloudflare says it open-sourced the project from the start because every company has its own terminology, procedures and systems, and the software needs to be customized around them. Anyone can already deploy Cloudflare OS into their own Cloudflare account from the repository, but that route means someone has to configure the deployment, operate it and keep it up to date.

How the managed option works

The fully managed version hands that operational work back to Cloudflare. Setting it up is a dashboard task: an administrator specifies the custom domain to use, which Cloudflare Access policies apply, and which AI Gateway to connect, and the company says it handles the rest.

Control stays with the customer at the policy level. Organizations decide who can enter the workspace, which organizational skills and context are available to agents, and which systems those agents are allowed to reach. Cloudflare says it will reach out to organizations that join the waitlist.

A month of new capabilities

Alongside the managed announcement, Cloudflare detailed what it added to the workspace over the past month.

GitHub repositories can now be connected directly. Agents can explore an existing codebase, fix bugs or add features, search and edit files, review their own changes, create commits, push them to GitHub and open pull requests. Cloudflare notes the original launch focused on work outside software development — documents, slides, task automation and team tools — and that this closes the gap.

Google Workspace support has been extended through improvements to its Gatekeeper, a service-specific Worker that sits between Cloudflare OS and an external service. Agents can now read and research Gmail threads, create drafts and send emails, and organizations can connect an entire Google Drive, a single folder, or an individual document or spreadsheet.

The built-in document, presentation and spreadsheet experiences gained export options: Excel (.xlsx), CSV, PDF, Markdown and HTML are available now, while Word (.docx) and PowerPoint (.pptx) are described as coming soon. Tools built inside the workspace can also define their own export formats; the blog's example is asking an agent to make a schedule downloadable as a calendar (.ics) file, which then appears in that tool's export menu.

Why it matters

The managed option changes who can realistically adopt Cloudflare OS. Self-hosting an agent workspace, even an open-source one, takes engineering effort many organizations will not spend; a dashboard-launched, vendor-operated alternative turns it into something IT can procure rather than a project a platform team has to own.

The governance design matters too. Routing sign-in through Cloudflare Access and model traffic through AI Gateway means identity controls and AI usage policy sit in products Cloudflare already sells, so adopting the workspace pulls a larger share of a customer's AI stack onto its platform. For a company best known for its network services, Cloudflare OS is a bet that it can be the front door for enterprise AI agents, not just the infrastructure underneath them.