EmDash is a modern, open-source CMS built in TypeScript on Astro, designed as WordPress's successor with secure, sandboxed plugins via Dynamic Workers.

How does EmDash fix WordPress plugin security?

Plugins run in isolated Dynamic Workers with capability-based manifests — declare access upfront (e.g., read:content), no direct DB/FS hooks, slashing 96% of WP's vuln source.

Will EmDash replace WordPress?

Not soon — WP's entrenched. But for new sites craving speed and safety, EmDash could capture devs tired of PHP exploits, potentially fragmenting the market by 2027.

🤖 AI Dev Tools

EmDash Emerges: WordPress Rebuilt for a Sandboxed, Serverless World

Two months of AI agents grinding away, and out pops EmDash — a TypeScript CMS that sandboxes plugins like they're rogue apps. WordPress's spiritual heir just hit beta, promising to fix what 24 years broke.

DevTools Feed Apr 02, 2026 3 min read 15 views

EmDash admin dashboard with sandboxed plugin interface on a modern content site

⚡ Key Takeaways

EmDash sandboxes plugins in Dynamic Workers, fixing WP's core security flaw with capability manifests. 𝕏
Built on Astro in TypeScript, it's serverless-native, deployable to Cloudflare or Node. 𝕏
Aims for WP compatibility without its code, MIT-licensed to boost adoption. 𝕏

Published by

DevTools Feed

Ship faster. Build smarter.

#Astro framework #CMS #CMS security #EmDash #WordPress #WordPress alternative #plugin security #serverless

Worth sharing?

Get the best Developer Tools stories of the week in your inbox — no noise, no spam.

Originally reported by Cloudflare Blog

⚡ Key Takeaways

The 60-Second TL;DR

DevTools Feed

Share this article

Worth sharing?

Related Stories

WordPress Powers 43% of the Web — Can EmDash's Astro Bet Actually Crack It?

WordPress Backend, SPA Frontend: The Headless CMS Hack That's Turbocharging Sites

WordPress Isn't the Default CMS Anymore — Here's Why Teams Are Ditching It

One Forgotten Line: How Anthropic Handed Rivals Their $340 Billion AI Crown Jewels

Stay in the loop