Why AI tools know nothing about your company — until now

Cloudflare introduced its open-source AI workspace platform, CloudflareOS, this week, aiming to provide employees with a secure workspace that integrates advanced AI tools and access to internal company systems. Unlike traditional virtual desktop infrastructure (VDI) services, CloudflareOS enables a more dynamic working environment by granting employees direct access to company tools, documents, and systems.

CloudflareOS operates on the principle that most enterprise AI tools possess extensive knowledge about the world at large but lack crucial insights into the specific operations, approval processes, and workflows of individual companies. Consequently, every new work session begins with the AI having to re-explain the context that should already be familiar.

Rita Koslov, VP for developers & AI at Cloudflare, emphasizes that granting new, context-aware agentic access securely requires addressing a novel set of security challenges. API keys, once commonly used, now pose significant risks as employees request API keys for their own tools and applications. To mitigate these risks, CloudflareOS proposes a capability-based access system that grants employees access to specific resources while recording the agent's actions and verifying the permissions of anyone who views the agent's work.

Developers and systems operations professionals should be aware that the main challenge lies in managing the large number of dynamically generated apps, each with its own persisted state and controlled access. CloudflareOS tackles this issue using Dynamic Workers and Durable Objects Facets, which provide isolated runtimes and storage, respectively. Moreover, Gateway workers supervise each app's interaction with external services.

While the platform offers robust security features, unforeseen consequences could still arise, such as internal data being inadvertently copied into AI tools, AI keys embedded in agent-built applications, or even unauthorized data sharing. Despite the risks and complexities involved, CloudflareOS aims to provide businesses with a secure and tailored alternative to generic AI tools.

By capturing a company's knowledge, processes, and ways of working in a form that AI can execute, employees can leverage a personalized workspace from day one, without the need for extensive integration efforts.