WordPress finally has some real competition

Cloudflare announced EmDash today, a brand-new content management system positioned as a modern alternative to WordPress. It's rough around the edges in places, but it's a strong start, and as of this writing, it's already pulled in 8.9k GitHub stars in a single day. That tells me there's a lot of pent-up demand for something better.

I've been critical of WordPress for a long time. It's still written in old-school PHP, it's perpetually plagued by security vulnerabilities (the Cloudflare team points out that 96% of WordPress security issues originate in plugins), and the architecture could use a serious modernization. None of that has stopped it from being wildly popular, of course, and for good reason. The community is massive, the ecosystem is mature, and despite its quirks, WordPress is "good enough" for an enormous swath of the web. But "good enough" doesn't mean it shouldn't be challenged.

EmDash takes some genuinely interesting swings at the problems WordPress has never solved well:

• Plugins run sandboxed in their own isolated Workers, and each plugin's manifest declares exactly which capabilities it's allowed to use. WordPress, by contrast, runs plugins with effectively full access, which is why so many security issues trace back to them.
• It's built on Astro and TypeScript, MIT-licensed, with passkey auth by default. No PHP or MySQL anywhere in the stack.
• It runs on Cloudflare Workers, scales to zero, and bills only for CPU time. You can also run it on any Node.js server if you prefer. (Can you even host a remotely popular WordPress site for less than $30/month these days??)
• A WXR importer and a dedicated exporter plugin handle migrating existing WordPress sites over.
• x402 is built in for monetization, so creators can charge for individual pieces of content without setting up a subscription system.

Is it polished? Not yet. Neither was WordPress in its early days, and neither were the JAMstack tools I moved to back in 2020. The authoring experience for less-technical users is the part I'd watch most closely. AI has made it dramatically easier for developers to scaffold, design, and even maintain websites, but content authors still want (and need) a visual admin to write, edit, and publish without thinking about the underlying machinery. Maybe that calculus changes as AI tooling improves, but for now, the CMS that wins is the one that nails the authoring experience for non-developers. WordPress still has the edge there. EmDash has work to do.

The bigger deal is that there's competition at all. WordPress has been the default for so long that nobody's had much reason to fundamentally rethink how a CMS should work, and a serious alternative will push both projects forward. There's plenty of room for both to coexist.

It probably won't hurt Cloudflare's bottom line either. The most natural place to host EmDash is Cloudflare itself, even if Vercel, Netlify, and others add first-class support before long. Building a popular open source project that happens to run best on your own platform is a pretty good business move.

I'm not planning to migrate this site. The Next.js + MDX setup is working well for me, and I'm already running it on Cloudflare Workers! But I'll be keeping an eye on EmDash. If you've been putting off launching a site because WordPress feels like too much baggage and the JAMstack tools feel too developer-centric, EmDash is worth a look.