6 Reasons Why Cloudflare’s EmDash Can’t Compete With WordPress

Cloudflare introduced a brand new content material administration system known as EmDash that it says is the “non secular successor to WordPress.” May EmDash be your subsequent content material administration system? Listed below are six explanation why EmDash could be the content material administration system of tomorrow… however not in the present day.

1. EmDash Is Not Person Centered

Cloudflare’s greatest promoting level for its new CMS, as said within the title of the announcement, is that it solves the WordPress safety downside. Over 25% of the announcement focuses on discussing plugin safety.

The remaining 73% of the announcement is devoted to:

• Background details about the evolution of internet growth.
• Placing WordPress throughout the context of the historical past of internet growth.
• The technical structure.
• Safety and authentication.
• Readiness for the x402 commonplace, which allows customers to monetize agentic web site site visitors.

There are over 2,700 phrases in that announcement, and the one half that arguably has direct significance to precise customers like bloggers, companies, and different publishers is the half about plugin safety. The remainder of the content material is developer- and coder-focused and never user-focused in any respect.

There are a lot of causes to decide on a CMS, and whereas safety is vital to companies and on-line publishers, there are different causes which are way more vital.

2. The Case For Plugin Safety

Cloudflare explains that WordPress plugin safety is compromised as a result of plugins are granted full entry to an internet site’s inside information and database. This lack of boundaries implies that if a single plugin has a flaw or malicious intent, it may possibly compromise your complete web site. The announcement explains that the overwhelming majority of safety vulnerabilities (96%) originate from third-party plugins.

What the announcement doesn’t say is that the overwhelming majority of WordPress plugin vulnerabilities are usually not prone to be exploitable at scale. Solely 17% of plugins are excessive severity, and of these, lots of them are usually not put in on many web sites.

Research from Patchstack WordPress security shows that in 2025:

“1,966 (17%) vulnerabilities had a excessive severity rating, which means they have been prone to be exploited in automated mass-scale assaults.

…Moreover, our Zero Day program discovered 33 extremely essential vulnerabilities in Premium parts, in comparison with solely 12 in free parts.”

There are a lot of WordPress vulnerabilities found day by day, however most of them are low danger and are discovered on plugins that aren’t broadly used. If plugin safety is EmDash’s important promoting level, it’s not a lot of a promoting level in the true world.

Cloudflare’s answer for enhancing plugin safety is stable and nicely designed. Nonetheless, an inexpensive argument may very well be made that Cloudflare’s case for plugin safety is overstating its significance within the total scheme of what customers really want.

3. EmDash Is Constructed To Clear up Infrastructure Issues

In a put up on X, Jamie Marsland of Automattic acknowledged that EmDash affords revolutionary options however argues that its focus is on fixing infrastructure points and isn’t targeted on the day by day issues that an precise CMS person (like a restaurant proprietor or a recipe blogger) can be curious about.

Marsland makes the purpose that builders might care about “cleaner abstractions” and “isolate runtimes,” however small enterprise homeowners care about issues like bookings, search engine optimization, and buyer acquisition. He makes use of the analogy of EmDash being a “tidy desk” for individuals who aren’t really seeking to tidy their desks however somewhat are targeted on utilizing a CMS that helps them run a enterprise.

Marsland explained:

“…when very sensible folks rebuild one thing from scratch, they have a tendency to repair the issues they’ll see most clearly.
And the issues Cloudflare sees are very actual:

• Plugin safety (sandboxing, isolation)
• Serverless scaling
• Trendy developer expertise
• AI-native programmability

All of which make excellent sense… In case you are trying on the world from inside an infrastructure firm.

…In case you are a developer, this seems like somebody has lastly tidied your desk. The issue is that most individuals are usually not making an attempt to tidy their desk.

They’re making an attempt to run a enterprise from it whereas:

• replying to emails
• posting on social
• updating their web site
• questioning why site visitors dropped”

4. EmDash Might Not Be Person Pleasant

EmDash is constructed on Astro, which technically will not be a CMS; it’s an online framework. EmDash wraps Astro round a graphical person interface (GUI) for content material administration which will really feel acquainted to anybody who has used WordPress. However setting all of it up will not be as simple as WordPress’s well-known 5 minute setup as a result of it may possibly contain connecting to a GitHub repository and configuring database settings. The identical is true for getting the positioning to look how a person needs it to look.

It has a GUI for managing content material, but it surely doesn’t (but) have a point-and-click web site builder the way in which most trendy content material administration methods like WordPress and Wix do.

5. Command Line Interface

I’m sufficiently old to recollect what utilizing a desktop laptop in 1980 was like. The interface was primarily a command line interface, with a cursor impatiently blinking on the person, ready for cryptic instructions to make it do one thing. It was not till 1983 that Apple launched a graphical person interface (GUI) that made interacting with a pc simple for on a regular basis customers.

In the event you like typing cryptic instructions to make a pc operate, then EmDash’s command line interface is for you. At this level, customers gained’t have the ability to get away from it as a result of customers at the moment can’t arrange an EmDash web site from scratch with out resorting to a CLI. Even the “one-click” deployment choices within the Cloudflare Dashboard ultimately require technical configuration that’s often dealt with through the terminal.

6. EmDash Is Not Prepared For Most Customers

I used to be fairly excited to learn Cloudflare’s announcement a couple of “non secular successor” to WordPress, however the extra I learn, the extra it turned obvious that EmDash will not be the answer I’m on the lookout for. Sure, I desire a fast-performing web site. Sure, I desire a web site that’s safe and gained’t shock me in the future with Japanese textual content.

However I don’t wish to cope with a CLI, and I do need an easy-to-use interface for establishing and constructing a horny web site for myself. EmDash will not be prepared for basic use. It’s nonetheless in early developer beta. The model quantity on it’s 0.1.0, so at this level it’s actually not for the typical person.

Hopefully, some day it is going to be a viable competitor to WordPress, however EmDash will not be that proper now.

Featured Picture by Shutterstock/Ollyy