← → or space to navigate
/ OS
01 / 27
PARTNER BRIEFING · PREPARED FOR NTT DATA INC.

Cloudflare
OS

An operating system for AI productivity.

Tze Yoong Tee
Principal Partner Solutions Architect, APJC
agentee.zeytee.com
01

Cloudflare

The connectivity cloud — one network, every layer.

GLOBAL SCALE

One network,
one control plane.

210+ cities for AI inference
80% of top 50 genAI companies
215B threats blocked / day
330+
Cities
125+
Countries
13,000+
Network interconnections
<50ms to 95%
of the world's Internet users
THE COMPLETE PORTFOLIO

Connect. Protect. Build.

Cloudflare's connectivity cloud — one control plane across security, performance, and developer services.

SASE & Workspace Security
  • ZTNA (with MCP Server Portals)
  • SWG (with AI Usage Controls)
  • CASB (with AI Posture Management)
  • Email Security
  • Data Loss Prevention
  • Remote Browser Isolation
  • Digital Experience Monitoring
App Security & Perf Services
  • AI Security for Apps
  • Bot Management (with AI Crawl Control)
  • WAF with Rate Limiting
  • API Protection
  • Load Balancing
  • L7 DDoS Protection
  • CDN and DNS
  • Origin Shield
Developer Services
  • AI inference
  • AI Gateway
  • Agentic SDK and Workflows
  • Serverless compute
  • Full stack applications
  • Object & key-value storage
  • SQL database
  • Media optimization and delivery
Network Services
Network-as-a-ServiceFirewall-as-a-ServiceL3 & L4 DDoS ProtectionNetwork InterconnectSmart RoutingIDS/IPS

Cloudflare Programmable Global Network

◆ Artificial Intelligence / Machine Learning◆ Threat, Network Intelligence
THE JOINT OPPORTUNITY

Built for where
NTT DATA leads.

Consulting
Cybersecurity
Cloud & application services
Managed services

Cloudflare adds a unified platform for secure AI productivity; NTT DATA can connect it to enterprise transformation and operations.

02

Cloudflare OS

An AI productivity environment — the framework, the architecture, and a live look inside.

DEFINITION

An operating system
for AI productivity.

Originally built for internal use — now open source so any company can make it their own.

Built inside Cloudflare
Used company-wide
Apache 2.0 · Open Source
WHY NOW

Enterprise AI adoption
follows a pattern.

VISIBILITY

Shadow AI sprawl

Employees adopt dozens of tools; IT has no idea what's used or what data leaves the building.

SECURITY

Speed outpaces review

Vibe-coded apps ship to production before security ever sees them.

PRODUCTIVITY

Duplicate work

No shared direction — everyone re-solves the same problem, alone.

COST

Token spend unmanaged

Every employee, most expensive model, every task — with no budget controls.

CREDIBILITY

Cloudflare's own journey.

Dogfooded before it ever shipped.

MAY 2025

Gemini

Sanctioned LLM for writing tasks & thought partnership

JAN 2026

Opencode

Agentic workflows opened beyond R&D

MAY 2026

Cloudflare OS

Full agent harness, curated skills, built in

CORE PILLARS

Equip every team member
to do more.

One-Click Workspace

Full agent harness, seconds after login.

Context Layer

Institutional knowledge, centrally curated.

Secure System-of-Record Access

Scoped access to real data, tightly controlled.

Model Optionality

Right model, by role and task.

COST MECHANICS

Scaling productivity
without scaling cost.

Model optionality
Dynamic routing
Faster inference
Caching

Map roles and skill files to the right model — control spend without slowing anyone down.

ARCHITECTURE

Cloudflare's agentic workspace.

AI Inference

Model optionality

AI Gateway

AI Agent Workspace

Deployed or local harness

Deployed Apps & Agents

One-click environments

Content Library

Curated context + skills

Systems of Record

Salesforce · Jira · Email · Radar

loads skills + context
MCP Portal
enriched by
GOVERNANCE MODEL

A framework for where and how
team members build.

Most work starts here ↓
LAYER II

Cloudflare OS

Skills + Context
  • Ad-hoc research
  • Meeting prep
  • Document generation
Contribute improvements
LAYER III

Cloudflare OS Apps

Custom-Purpose Apps
  • Self-service forms
  • Team dashboards
  • Shared apps by URL
Alpha
LAYER IV

Centrally Managed

Rigid Business Logic
  • Deal desk tools
  • Compliance workflows
  • Canonical reporting
Team-owned + governed
LAYER V

Public Use

External Audience
  • Customer-facing tools
  • Partner demos
  • External microsites
Reviewed
FLEXIBLESTRUCTUREDREVIEWED
LAYER I

Systems of Record

Salesforce · Workday · ERP · Jira · Internal platforms
CLOUDFLARE OS 2.0 · PUBLIC RELEASE
RELEASEDAUGUST 5, 2026

Three months inside Cloudflare.
Then rebuilt for everyone.

V1 · MAY 2026 · INTERNAL

Proven internally

Private agent workspaces, shared context and skills — used company-wide.

→
V2 · AUGUST 5 · OPEN SOURCE

Built to belong to you

Deploy it, connect your systems and shape it around how your organization works.

PRIVATE WORKSPACES
→Collaborative, shareable apps
STATIC OUTPUTS
→Live, connected software
AGENT RERUNS
→Deterministic workflows
Security became part of the platform. Credentials stay isolated; access policy follows the data.
Source: Cloudflare Blog · August 5, 2026
CLOUDFLARE OS 2.0 · OPEN SOURCE

A real operating system,
built on Cloudflare's own stack.

Traditional OSShell
workshop-frontend React single-page app — chat, gadget canvas, connections & action-approval UI.
Cap'n Web RPC / WebSocket
Traditional OSKernel
workshop-backend · Overseer DO Owns all session state · capability-based security · Action Approval Queue for every write.
Durable Objects · SQLite
Traditional OSDevice drivers
Gatekeepers Per-vendor Workers as credential custodians — GitHub, Google, Slack, Notion, MCP & more.
Workers · DO Facets
Traditional OSProcesses
Gadgets · from Blueprints One private, sandboxed app instance per user — internet-disabled, real-time collaborative.
Dynamic Worker Facets
Traditional OSno equivalent
AI Agents · Code Mode Agents write & execute code against typed Gatekeeper + Gadget APIs — the new primitive.
Workers AI · AI Gateway
github.com/cloudflare/cloudflare-os Open source · Apache 2.0 — fork it, self-host it, make it yours.
✳

Cloudflare OS
in Action

See it work — then how your teams put it to use.

SEE IT WORK · 01

Research and ask questions.

The agent writes code to search, filter, join, and analyze — instead of pulling an entire dataset into the model's context window.

Click to play · Cloudflare demo
SEE IT WORK · 02

Create docs, slides
and spreadsheets.

Outputs need not be static files — they can stay connected to live data and update as their sources change.

Click to play · Cloudflare demo
SEE IT WORK · 03

Build connected apps
for your team.

When a document or spreadsheet is not enough, the agent builds an app with its own interface, logic, and state — used by many people together.

Click to play · Cloudflare demo
SEE IT WORK · 04

Run deterministic
workflows.

Code for the predictable steps, a model only where it adds value — run on demand, on a schedule, or when an event fires in a connected system.

Click to play · Cloudflare demo
MOMENTUM

And, we're
just getting started.

What you just saw is the current state — not the finish line.

03

AI Security

Securing agents, models, and every tool call in between.

THE FULL SUITE

Cloudflare's AI Security Suite.

One platform, four categories — spanning Zero Trust, Application Security, and the Developer Platform.

01

Protect workforce use of AI

Discover & control how employees interact with genAI tools like ChatGPT and Claude.

SASE for AI
02

Protect agentic AI access

Secure interactions between AI agents and corporate resources.

ZTNA + MCP Server Portals
03

Protect AI-powered apps

Defend chatbots and AI apps against data loss and attacks.

AI Security for Apps
04

Build securely with AI

Build AI apps and agents for internal or customer use.

AI Gateway

Highlighted: the two pillars that directly secure Cloudflare OS — next.

TECHNICAL ARCHITECTURE

Model agnostic.
Secure by default.

LLMs
ChatGPTCursorWorkers AI
User
Cloudflare OS
Codex
Reqs.SkillsRFCs
CLOUDFLARE
AI Gateway
Remote MCP servers
MCP server portals
ZTNA (Access)
Internal services
ClickHouseSnowflake
SaaS MCP Servers
Slack · Salesforce · Jira · PayPal · Shopify · GitHub
1
click the diagram to step through the four components →
PILLAR 04 · AI SECURITY / COST / PERFORMANCE

AI Gateway

One control plane between your apps and any LLM — for security, cost governance, and performance.

Guardrails & DLP — security
Caching & rate limiting — cost
Dynamic routing — performance
Full request logging — visibility
Solves: Token cost + Shadow AI visibility + model lock-in
PILLAR 04 · AI SECURITY / COST / PERFORMANCE

AI Gateway — the control plane
for every LLM call.

Apps & Agents
Skills · harness · deployed agents
↓
Cloudflare AI Controls
Cloudflare's control plane for AI traffic
AI Gateway MCP Server Portals Zero Trust Network Access
Cloudflare Workers AI
External Inference

Cost-efficient AI usage for every employee:

Model optionality

Control model usage without lock-in risk.

Dynamic routing

Map employee roles and skill files to specific models.

Faster inference

Faster, more cost-efficient inference.

Caching

Save token spend on at-scale usage.

PILLAR 03 · PROTECT AI-POWERED APPS

AI Security for Apps

Formerly Firewall for AI — a WAF-integrated detection layer for your own AI-powered, customer-facing apps.

LLM endpoint discovery
Prompt injection score (1–99)
PII detection, 37 categories
Unsafe topic detection

Model-agnostic, runs inline at the edge — the bidirectional counterpart to AI Gateway's outbound DLP.

PILLAR 02 · PROTECT AGENTIC AI ACCESS

Remote MCP Servers

Host MCP remotely — instead of locally on developer devices.

No ambient credentials on laptops
Centrally managed & monitored
Smaller local attack surface
PILLAR 02 · PROTECT AGENTIC AI ACCESS

MCP Server Portals

A governed portal for internal services & SaaS apps — capability-based, not ambient.

Capability-based access
Human-in-the-loop approval
Full audit log

Gatekeepers approve asynchronously — agents keep working, humans review on their own time.

Solves: Dev-speed-vs-review + Shadow AI visibility
PILLAR 02 · PROTECT AGENTIC AI ACCESS

ZTNA (Access)

Enforce Zero Trust policies to authenticate and authorize every request.

The same Access product you already sell — now securing agent traffic too.
BACK TO WHERE WE STARTED

Every pain point,
accounted for.

VISIBILITY

Shadow AI sprawl

↓
AI Gateway + MCP Portal
SECURITY

Speed outpaces review

↓
Gatekeepers
PRODUCTIVITY

Duplicate work

↓
Shared skill library
COST

Token spend

↓
AI Gateway
04

Developer Platform

What Cloudflare OS is actually built on.

FULL PORTFOLIO

Every primitive,
one runtime.

Cloudflare OS uses a slice of this — the rest is available for whatever NTT DATA builds next.

COMPUTE
WorkersDynamic WorkersPagesContainersWorkers for Platforms
STATE & STORAGE
Durable ObjectsR2KVD1HyperdriveQueues
AI
AI GatewayWorkers AIVectorizeAI SearchAgents SDK
REALTIME & MEDIA
Browser RunRealtimeStreamImages
ORCHESTRATION
WorkflowsSandbox SDKSecrets StorePipelines

Verified against the cloudflare-os source repo — wrangler bindings, env.AI + AI Gateway billing code, and the README's own architecture notes.

Orange = confirmed used by Cloudflare OS today
FOUNDATION

Built on Workers,
by the Workers team.

WORKSPACE DURABLE OBJECT

Supervisor for one workspace

Identity · permissions · orchestration
strongly consistent state
SUPERVISOR

Cloudflare OS runtime

Controls what dynamically loaded code can access and where its outputs can go.

Own SQLite state
WORKER LOADERloads a Dynamic Worker class at runtime
DURABLE OBJECT FACET

Gadget

AI-built app server, isolated from the supervisor.

Isolated SQLite
DURABLE OBJECT FACET

Gatekeeper

Governed access to one connected resource.

Isolated SQLite
CLOUDFLARE WORKERS RUNTIMEcompute · isolation · bindings
THE HARDER QUESTION

Why here, not AWS / GCP / Azure?

Agents are a different workload than websites — they chain tool calls, wait on LLMs, and need to run close to whatever they're calling.

DIMENSION
HYPERSCALERS
CLOUDFLARE
Cold start
Lambda: 100–500ms · containers: seconds+
Workers: under 5ms
Billing model
Wall-clock time — billed while waiting
CPU time only — not billed while idle
Agent-service reach
Bedrock / Foundry: a handful of regions
330+ cities, edge-native
Security model
IAM + separate WAF/CDN vendor, bolted on
Zero Trust, Access, Gateway — same network

Honest caveat: hyperscalers still lead on deep managed ML training and GPU pipelines. Cloudflare's story is serving and securing agents at the edge — not training foundation models.

ARCHITECTURE, NOT ASSEMBLY

Purpose-built,
not assembled from parts.

On traditional cloud, an agent means stitching together six services before writing any agent logic.

Compute service
Database
Message queue
Container runtime
Secrets manager
API gateway

On Cloudflare, it's one integrated framework:

Agents SDK
Durable Objects — state lives with the agent
Workflows — durable retries + human-in-the-loop
THE PRICING ARGUMENT

Pay for thinking,
not for waiting.

Agents spend most of their time waiting — on the LLM, on a human approval, on a scheduled trigger.

Traditional VM / container
alive 24 hours
24 hours
Cloudflare Durable Object
alive 24 hours, hibernates when idle
10 seconds

An agent that runs 10 seconds of actual compute but stays "alive" for 24 hours costs 10 seconds — not a day of a server.

THE NEW PRIMITIVE · CODE MODE

Don't call tools —
write code.

Models are trained to write code. So give the agent one code tool, not fifty — it writes a plan that runs in a sandbox and returns only what matters.

DIRECT TOOL CALLS

Every step round-trips the model

LLM→ tool→ LLM→ tool→ LLM→ tool
CODE MODE

One program composes it all in-sandbox

LLM→ code  ·  many calls  ·  one result
up to 80% fewer inference tokens & cost
// the model writes this — not 5 separate tool calls
const projects = await codemode.list_projects({ status: "active" });
const blocked = [];
for (const p of projects)
  blocked.push(...await codemode.list_tasks({ projectId: p.id }));
return blocked.filter(t => t.status === "blocked");

A Developer Platform primitive — code runs in an isolated Dynamic Worker, so credentials stay out of the model context. On MCP server portals, Code Mode is on by default.

05

Let's bring it to
market together.

Cloudflare brings the platform. NTT DATA brings transformation and delivery expertise.

WHO DOES WHAT

Cloudflare provides the toolkit;
you bring expertise & white-glove services.

Cloudflare's own
NTT DATA-led

Comprehensive security & cost controls

  • AI Gateway
  • Zero Trust Network Access
  • MCP server hosting + portals

Full-stack developer platform

  • Storage
  • Compute
  • AI

Starter kit of skill & context files

  • Cloudflare's own
  • Partner augmented

Consulting to build the context layer

  • Shape use cases, workflows, skills and enterprise context

Implementation & managed services

  • Customize experiences
  • Integrate enterprise systems
  • Operate and evolve
FOUNDATIONAL WORK

Invest in a
central context layer.

Email Alias
Magic inbox for work requests
Expert Tasks
Documented expert workflows
↓
Triage & Audit
AI agent operators curate the work
↓
Skill Repo
Curated skill files + context, centrally managed
↓
AI Agent Workspace
Surfaced and ready-to-use in Cloudflare OS

A proposed NTT DATA consulting motion: define jobs-to-be-done as centrally managed skill files.

1

Document workflows

Tap experts to document workflows and create skill files.

2

Open a magic inbox

An email alias where everyone else can send work.

3

Staff it with agents

AI agent operators run the inbox as a service.

4

Curate into skills

Collect the use cases and convert them to skill files.

5

Surface in Cloudflare OS

Everything is ready-to-use for the whole team.

SKILLS VS CONTEXT

Two file types,
one knowledge layer.

Skill File

Teaches an agent how to do one task — like a recipe.

When to use it — what triggers the task
Step-by-step, each step an action verb
Common mistakes to avoid + if/then logic
One page ideal · .md

Context File

Gives an agent background knowledge — like a glossary.

Overview — 2–3 sentences on the topic
Key definitions — terms, plain-language
Quick reference table — "if X, use Y"
One–two pages · .md
DEPLOYMENT MODEL · PROPOSED

From pilot to production
in 10 weeks.

An illustrative joint delivery model — Cloudflare enables; NTT DATA leads transformation, integration and operations.

01

Design

4 WEEKS
Stakeholder mapping
Technical review
Project plan & customization
02

Build

4 WEEKS
Context & skills buildout
Cloudflare OS app deployment
MCP integration
Pilot deployment & launch
03

Manage

ONGOING
2 weeks post-launch support
Steady-state operations
Ongoing context updates

Proposed scope: NTT DATA leads architecture, security, identity & operations — not just code delivery. Confirm roles and timing during pilot design.

ENGAGEMENT ECONOMICS · ILLUSTRATIVE

The business case
for both sides.

Reference model for a 5,000-seat digital-native client — partner services plus recurring Cloudflare consumption.

THE NUMBERS
~$1.7M
partner services revenue over the program
$650K
monthly recurring, at steady state
LLM token cost~$570K / mo
Cloudflare services~$80K / mo
DELIVERY TEAM
4
onsite FTE
full program duration
6
remote FTE
flexed across phases, not all full-time

Illustrative estimate. Figures are based on a 5,000-seat reference deployment from Cloudflare's internal experience — not an NTT DATA quote, forecast or approved offer. Actuals depend on scope, seat count & model choice, and are validated during the MVP.

06

Get Started

Standing up a trial environment, with provisioning agreed jointly.

SETUP · PART 1

From zero
to running.

1

Confirm trial environment

Cloudflare and NTT DATA align entitlement, ownership and provisioning.

2

Run it locally

pnpm run-local → localhost:8787

3

Deploy to the agreed account

os.cloudflare.app/deploy

SETUP · PART 2

Make it
yours.

$ git clone cloudflare/cloudflare-os-starter
$ pnpm dev-server
$ pnpm dev-client
4

Customize via the starter repo

Add your own Gatekeepers and code changes.

5

Configure Gatekeepers

OAuth setup per integration — GitHub, Google, Slack, Notion, and more.

SET EXPECTATIONS

What you're
actually seeing.

EARLY ACCESS

v2 rewrite

Very capable, but still has rough edges — the team says so themselves.

Self-hosted workerd

Fully independent deployment — coming soon, not available today.

NEXT STEP

Let's build
NTT DATA OS.

Start with one jointly selected workflow, prove the platform, then decide how to scale it.

MOVE 01

For your teams

Pilot internally — tune productivity, security and cost controls to one NTT DATA workflow and operating model.

MOVE 02

For your customers

Evaluate a client offer — combine Cloudflare's platform with NTT DATA consulting, integration and managed services.

Align one joint pilot

Got a question? Ask agentee.zeytee.com