← → or space to navigate
/ OS
01 / 48
NTT IGNITE · PRESENTED BY NTT DATA

Cloudflare
OS

Your people. Your knowledge.
Your AI-powered workplace.

NTT DATA
Consulting · Integration · Cybersecurity · Managed Services
Powered by Cloudflare OS
01

Cloudflare

The connectivity cloud — one network, every layer.

GLOBAL SCALE

One network,
one control plane.

200+ cities for AI inference
Powers 1 in 5 Internet sites
234B+ cyber threats blocked / day
335+
Cities
125+
Countries
13,000+
Network interconnections
<50ms to 95%
of the world's Internet users

Published figures checked Oct 22, 2026 · Cloudflare network · Workers AI

THE COMPLETE PORTFOLIO

Connect. Protect. Build.

Cloudflare's connectivity cloud — one control plane across security, performance, and developer services.

SASE & Workspace Security
  • ZTNA (with MCP Server Portals)
  • SWG (with AI Usage Controls)
  • CASB (with AI Posture Management)
  • Email Security
  • Data Loss Prevention
  • Remote Browser Isolation
  • Digital Experience Monitoring
App Security & Perf Services
  • AI Security for Apps
  • Bot Management (with AI Crawl Control)
  • WAF with Rate Limiting
  • API Protection
  • Load Balancing
  • L7 DDoS Protection
  • CDN and DNS
  • Origin Shield
Developer Services
  • AI inference
  • AI Gateway
  • Agentic SDK and Workflows
  • Serverless compute
  • Full stack applications
  • Object & key-value storage
  • SQL database
  • Media optimization and delivery
Network Services
Network-as-a-ServiceFirewall-as-a-ServiceL3 & L4 DDoS ProtectionNetwork InterconnectSmart RoutingIDS/IPS

Cloudflare Programmable Global Network

◆ Artificial Intelligence / Machine Learning◆ Threat, Network Intelligence
FROM PLATFORM TO BUSINESS VALUE

One platform.
Your transformation.

Consulting
Cybersecurity
Cloud & application services
Managed services

NTT DATA brings Cloudflare's unified platform to your people, enterprise systems and business workflows.

02

Cloudflare OS

An AI productivity environment — the framework, the architecture, and a live look inside.

DEFINITION

An operating system
for AI productivity.

Originally built for internal use — now open source so any company can make it their own.

Built inside Cloudflare
Used company-wide
Apache 2.0 · Open Source
WHY NOW

Enterprise AI adoption
follows a pattern.

VISIBILITY

Shadow AI sprawl

Employees adopt dozens of tools; IT has no idea what's used or what data leaves the building.

SECURITY

Speed outpaces review

Vibe-coded apps ship to production before security ever sees them.

PRODUCTIVITY

Duplicate work

No shared direction — everyone re-solves the same problem, alone.

COST

Token spend unmanaged

Every employee, most expensive model, every task — with no budget controls.

CREDIBILITY

Cloudflare's own journey.

Dogfooded before it ever shipped.

MAY 2025

Gemini

Sanctioned LLM for writing tasks & thought partnership

JAN 2026

Opencode

Agentic workflows opened beyond R&D

MAY 2026

Cloudflare OS

Full agent harness, curated skills, built in

CORE PILLARS

Equip every team member
to do more.

One-Click Workspace

Full agent harness, seconds after login.

Context Layer

Institutional knowledge, centrally curated.

Secure System-of-Record Access

Scoped access to real data, tightly controlled.

Model Optionality

Right model, by role and task.

COST MECHANICS

Scaling productivity
without scaling cost.

Model optionality
Dynamic routing
Faster inference
Caching

Map roles and skill files to the right model — control spend without slowing anyone down.

ARCHITECTURE

Cloudflare's agentic workspace.

AI Inference

Model optionality

AI Gateway

AI Agent Workspace

Deployed or local harness

Deployed Apps & Agents

One-click environments

Content Library

Curated context + skills

Systems of Record

Salesforce · Jira · Email · Radar

loads skills + context
MCP Portal
enriched by
GOVERNANCE MODEL

A framework for where and how
team members build.

Most work starts here ↓
LAYER II

Cloudflare OS

Skills + Context
  • Ad-hoc research
  • Meeting prep
  • Document generation
Contribute improvements
LAYER III

Cloudflare OS Apps

Custom-Purpose Apps
  • Self-service forms
  • Team dashboards
  • Shared apps by URL
Alpha
LAYER IV

Centrally Managed

Rigid Business Logic
  • Deal desk tools
  • Compliance workflows
  • Canonical reporting
Team-owned + governed
LAYER V

Public Use

External Audience
  • Customer-facing tools
  • Partner demos
  • External microsites
Reviewed
FLEXIBLESTRUCTUREDREVIEWED
LAYER I

Systems of Record

Salesforce · Workday · ERP · Jira · Internal platforms
CLOUDFLARE OS 2.0 · PUBLIC RELEASE
RELEASEDAUGUST 5, 2026

Three months inside Cloudflare.
Then rebuilt for everyone.

V1 · MAY 2026 · INTERNAL

Proven internally

Private agent workspaces, shared context and skills — used company-wide.

→
V2 · AUGUST 5 · OPEN SOURCE

Built to belong to you

Deploy it, connect your systems and shape it around how your organization works.

PRIVATE WORKSPACES
→Collaborative, shareable apps
STATIC OUTPUTS
→Live, connected software
AGENT RERUNS
→Deterministic workflows
Security became part of the platform. Credentials stay isolated; access policy follows the data.
Source: Cloudflare Blog · August 5, 2026
CLOUDFLARE OS 2.0 · OPEN SOURCE

A real operating system,
built on Cloudflare's own stack.

Traditional OSShell
workshop-frontend React single-page app — chat, gadget canvas, connections & action-approval UI.
Cap'n Web RPC / WebSocket
Traditional OSKernel
workshop-backend · Overseer DO Workspace state · capability-based security · queued actions with configurable approval.
Durable Objects · SQLite
Traditional OSDevice drivers
Gatekeepers Per-vendor Workers as credential custodians — GitHub, Google, Slack, Notion, MCP & more.
Workers · DO Facets
Traditional OSProcesses
Gadgets · from Blueprints One private, sandboxed app instance per user — internet-disabled, real-time collaborative.
Dynamic Worker Facets
Traditional OSno equivalent
AI Agents · Code Mode Agents write & execute code against typed Gatekeeper + Gadget APIs — the new primitive.
Workers AI · AI Gateway
github.com/cloudflare/cloudflare-os Open source · Apache 2.0 — fork it, self-host it, make it yours.
✳

Cloudflare OS
in Action

See it work — then how your teams put it to use.

SEE IT WORK · 01

Turn information
into answers.

Prepare a briefing or investigate a question using connected resources — the agent searches, filters and analyzes data for the task.

Click to play · Cloudflare demo
SEE IT WORK · 02

Create docs, slides
and spreadsheets.

Draft a business review, build a planning sheet or create a presentation — with outputs that can stay connected to their sources.

Click to play · Cloudflare demo
SEE IT WORK · 03

Build connected apps
for your team.

Move beyond a spreadsheet: create a shared dashboard, intake tool or team workspace tailored to the way your business works.

Click to play · Cloudflare demo
SEE IT WORK · 04

Run deterministic
workflows.

Automate repeatable steps; use a model where judgment adds value. Run on demand, on a schedule, or from supported integration events.

Click to play · Cloudflare demo
STANDARD GATEKEEPERS

Connect your tools.
Scope every connection.

19 standard Gatekeeper packages in the public repository — connect the resources your workflow needs.

Google

One integration, eight services

GmailDriveDocsSheetsSlidesCalendarChatBigQuery

Knowledge & teamwork

  • Slack
  • Notion
  • Confluence
  • Linear
  • ZoomInfo

Developer & data

  • GitHub
  • GitLab
  • Cloudflare
  • Supabase
  • MCP servers
  • MCP Server Portals

Other integrations

  • Home Assistant
  • Spotify
  • X
  • Email Workers*
PreinstalledContext & SkillsSchedulerWeb Search

Connections depend on configured credentials and resource permissions. *Email Workers requires manual Email Routing setup.
Source: standard packages · Installation defaults

03

AI Security
& Governance

Control who can act, what they can access, and how AI is used.

THE FULL SUITE

Cloudflare's AI Security Suite.

One platform, four categories — spanning Zero Trust, Application Security, and the Developer Platform.

01

Protect workforce use of AI

Discover & control how employees interact with genAI tools like ChatGPT and Claude.

SASE for AI
02

Protect agentic AI access

Secure interactions between AI agents and corporate resources.

ZTNA + MCP Server Portals
03

Protect AI-powered apps

Defend chatbots and AI apps against data loss and attacks.

AI Security for Apps
04

Build securely with AI

Build AI apps and agents for internal or customer use.

AI Gateway

Highlighted: relevant controls for your Cloudflare OS architecture. NTT DATA designs the integration and policy scope.

TECHNICAL ARCHITECTURE

Model agnostic.
Secure by default.

LLMs
ChatGPTCursorWorkers AI
User
Cloudflare OS
Codex
Reqs.SkillsRFCs
CLOUDFLARE
AI Gateway
Remote MCP servers
MCP server portals
ZTNA (Access)
Internal services
ClickHouseSnowflake
SaaS MCP Servers
Slack · Salesforce · Jira · PayPal · Shopify · GitHub
1
click the diagram to step through the four components →
PILLAR 04 · AI SECURITY / COST / PERFORMANCE

AI Gateway

One control plane between your apps and any LLM — for security, cost governance, and performance.

Guardrails & DLP — security
Caching & rate limiting — cost
Dynamic routing — performance
Full request logging — visibility
Solves: Token cost + Shadow AI visibility + model lock-in
PILLAR 04 · AI SECURITY / COST / PERFORMANCE

AI Gateway — the control plane
for every LLM call.

Apps & Agents
Skills · harness · deployed agents
↓
Cloudflare AI Controls
Cloudflare's control plane for AI traffic
AI Gateway MCP Server Portals Zero Trust Network Access
Cloudflare Workers AI
External Inference

Cost-efficient AI usage for every employee:

Model optionality

Control model usage without lock-in risk.

Dynamic routing

Map employee roles and skill files to specific models.

Faster inference

Faster, more cost-efficient inference.

Caching

Save token spend on at-scale usage.

PILLAR 03 · PROTECT AI-POWERED APPS

AI Security for Apps

Formerly Firewall for AI — a WAF-integrated detection layer for your own AI-powered, customer-facing apps.

LLM endpoint discovery
Prompt injection score (1–99)
PII detection, 37 categories
Unsafe topic detection

Model-agnostic, runs inline at the edge — the bidirectional counterpart to AI Gateway's outbound DLP.

PILLAR 02 · PROTECT AGENTIC AI ACCESS

Remote MCP Servers

Host MCP remotely — instead of locally on developer devices.

No ambient credentials on laptops
Centrally managed & monitored
Smaller local attack surface
PILLAR 02 · PROTECT AGENTIC AI ACCESS

MCP Server Portals

A governed portal for internal services & SaaS apps — capability-based, not ambient.

Identity-aware MCP access
Tool policies
Access visibility

Portals govern MCP access. Cloudflare OS Gatekeepers separately scope resources and queue actions for approval.

GitHub and GitLab actions support opt-in auto-approval. GitHub merges and approving reviews remain manual; force-push has a separate permission.

Solves: Dev-speed-vs-review + Shadow AI visibility
PILLAR 02 · PROTECT AGENTIC AI ACCESS

ZTNA (Access)

Enforce Zero Trust policies to authenticate and authorize every request.

Build on your Cloudflare One controls where deployed — extend governed access to AI workflows.
BACK TO WHERE WE STARTED

Every pain point,
accounted for.

VISIBILITY

Shadow AI sprawl

↓
AI Gateway + MCP Portal
SECURITY

Speed outpaces review

↓
Gatekeepers
PRODUCTIVITY

Duplicate work

↓
Shared skill library
COST

Token spend

↓
AI Gateway
04

Developer Platform

What Cloudflare OS is actually built on.

PLATFORM SNAPSHOT

The right primitives.
One platform.

Cloudflare OS uses a slice of this — NTT DATA can extend the platform for your next connected application.

COMPUTE
WorkersDynamic WorkersPagesContainersWorkers for Platforms
STATE & STORAGE
Durable Objects + FacetsR2Workers KVD1HyperdriveQueues
AI
AI Gateway*Workers AI*VectorizeAI SearchAgents SDK
BROWSER & MEDIA
Browser Run · exportsRealtimeStreamImages
AUTOMATION/OPS
WorkflowsSandbox (@cloudflare/sandbox)Secrets StoreBasin Pipelines†
Orange = reference implementation
Blue = optional analytics hook
Gray = broader platform

*AI routing depends on configuration; Workers AI also provides document conversion and web search. Browser Run handles Gadget exports and can be omitted.
†Basin Pipelines (formerly Pipelines): optional PRODUCT_ANALYTICS binding; absent from the default release configuration.
Audited Oct 22, 2026 · public source a679442 (Oct 20) · Bindings · AI routing · Analytics hook · Product names

FOUNDATION

Built on Workers,
by the Workers team.

WORKSPACE DURABLE OBJECT

One OverseerDurableObject per workspace

Access checks · orchestration
strongly consistent workspace state
SUPERVISOR

Workspace supervisor

Controls capabilities, orchestrates agents and manages Gadget and Gatekeeper facets.

Own SQLite database
WORKER LOADERLoads the Gadget's exported class
GADGET FACET

AI-built application

Dynamic Worker code; no direct outbound network access.

Isolated SQLite
INTEGRATION WORKERSupplies a Gatekeeper class
GATEKEEPER FACET

Governed connection

Scopes remote-service access and mediates actions.

Isolated SQLite
CLOUDFLARE WORKERS RUNTIMEParent + facets are co-located; SQLite stores remain isolated

Source: Gadget loading & facets · Gatekeeper facets · Facet storage model

THE HARDER QUESTION

The right foundation
for connected AI.

Agents are a different workload than websites — they chain tool calls, wait on LLMs, and need to run close to whatever they're calling.

DESIGN NEED
WHAT YOUR WORKFLOW NEEDS
CLOUDFLARE FOUNDATION
Execution
Run generated app code in isolation
Workers + Dynamic Workers
State
Coordinate shared, interactive work
Durable Objects + isolated facets
AI traffic
Choose models and govern requests
AI Gateway + model providers
Access
Connect approved systems and users
Gatekeepers + configured Zero Trust

Complement your existing cloud investments. Deep managed ML training and GPU pipelines remain hyperscaler strengths; this foundation focuses on serving and securing connected AI workflows.

ARCHITECTURE, NOT ASSEMBLY

Purpose-built,
not assembled from parts.

On traditional cloud, an agent means stitching together six services before writing any agent logic.

Compute service
Database
Message queue
Container runtime
Secrets manager
API gateway

On Cloudflare, it's one integrated framework:

Agents SDK
Durable Objects — state lives with the agent
Workflows — durable retries + human-in-the-loop
THE PRICING ARGUMENT

Pay for thinking,
not for waiting.

Agents spend most of their time waiting — on the LLM, on a human approval, on a scheduled trigger.

Traditional VM / container
alive 24 hours
24 hours
Cloudflare Durable Object
alive 24 hours, hibernates when idle
10 seconds

Workload illustration, not a price quote: CPU billing tracks compute, while Durable Object duration depends on activity and hibernation. Requests, storage, models and other service charges also apply.

THE NEW PRIMITIVE · CODE MODE

Don't call tools —
write code.

Models are trained to write code. So give the agent one code tool, not fifty — it writes a plan that runs in a sandbox and returns only what matters.

DIRECT TOOL CALLS

Every step round-trips the model

LLM→ tool→ LLM→ tool→ LLM→ tool
CODE MODE

One program composes it all in-sandbox

LLM→ code  ·  many calls  ·  one result
fewer hops less repeated model orchestration
// the model writes this — not 5 separate tool calls
const projects = await codemode.list_projects({ status: "active" });
const blocked = [];
for (const p of projects)
  blocked.push(...await codemode.list_tasks({ projectId: p.id }));
return blocked.filter(t => t.status === "blocked");

A Developer Platform primitive — code runs in an isolated Dynamic Worker, so credentials stay out of the model context. On MCP server portals, Code Mode is on by default.

05

From AI potential
to business value.

NTT DATA connects the platform to your people, systems and operations.

WHAT NTT DATA BRINGS

Your transformation.
Expertise at every step.

NTT DATA-led engagement

Discover the right opportunity

  • Assess AI readiness
  • Prioritize workflows
  • Define business outcomes

Connect your enterprise

  • Identity and access
  • Selected SaaS and data
  • Custom integrations

Build around your teams

  • Curated knowledge and skills
  • Tailored apps
  • Repeatable workflows

Govern AI adoption

  • Scope resource access
  • Configure approvals
  • Review models and usage

Operate and improve

  • Support user adoption
  • Maintain integrations
  • Review and evolve outcomes
YOUR KNOWLEDGE, MADE ACTIONABLE

Turn your expertise
into reusable capability.

Business Knowledge
Your approved sources and guidance
Expert Workflows
How your best teams get work done
↓
NTT DATA + Your Experts
Select, structure and validate
↓
Shared Context + Skills
Reusable collections with scoped sharing
↓
AI Agent Workspace
Surfaced and ready-to-use in Cloudflare OS

NTT DATA helps turn institutional knowledge into a maintained capability for your teams.

1

Select trusted knowledge

Identify owners, approved sources and access boundaries.

2

Capture expert practice

Document the steps, decisions and exceptions that matter.

3

Package reusable skills

Give agents task instructions and relevant business context.

4

Validate with your teams

Check output quality, permissions and human review.

5

Maintain and improve

Keep knowledge current as your systems and processes change.

KNOWLEDGE ENGINEERING · NTT DATA

Two file types,
one knowledge layer.

Skill File

Your repeatable way of working — expressed as task instructions.

Example: prepare a weekly account review
Steps, checks and escalation conditions
Reusable across the teams you authorize
One page ideal · .md

Context File

Your business knowledge — available where the task needs it.

Example: products, terminology and service guidance
Approved reference material and business rules
Owned and maintained with your subject experts
One–two pages · .md
YOUR DELIVERY JOURNEY

Start focused.
Scale with evidence.

NTT DATA leads a phased engagement, with your business owners involved at every decision.

01

Discover

ALIGN
Select one valuable workflow
Assess data, access and readiness
Agree scope and success measures
02

Pilot

PROVE
Deploy a scoped workspace
Connect approved resources
Configure skills and controls
Measure results with pilot users
03

Expand

EVOLVE
Plan rollout from pilot evidence
Agree operational ownership
Improve context and workflows

Agree scope, integration feasibility, timeline and support terms during discovery. Expansion follows readiness and measured results.

YOUR PILOT SCORECARD

Measure what
matters to your business.

Establish the baseline first. NTT DATA works with your team to assess the change.

Workflow efficiency

Completion time, manual steps and human review effort per task.

Quality and adoption

Output acceptance, corrections, repeat usage and user feedback.

Cost per task

Model and platform usage, integration and service costs against delivered value.

Governance fit

Resource scope, approvals, access reviews and operating ownership.

Evidence before expansion. Targets are agreed for your workflow during discovery. Productivity gains and savings are measured, not assumed.

06

Your adoption
journey.

One meaningful workflow. A clear owner. A measured next step.

START WITH NTT DATA

Bring us
one workflow.

1

A business problem worth solving

A repeated task with a clear owner and a baseline you can measure.

2

The people and systems involved

Business experts, IT and security — plus the resources the workflow actually needs.

3

A shared definition of success

Agree the pilot scope, controls, evaluation criteria and next decision.

YOUR OPERATING MODEL

Your teams stay in control.
NTT DATA helps you deliver.

BUSINESS

Own the outcomes

Your business owners select priorities, validate outputs and guide adoption.

TECHNOLOGY

Shape the deployment

NTT DATA and your IT and security teams align identity, integrations, data access and models.

OPERATIONS

Keep improving

Agree support responsibilities, release management and ongoing knowledge and workflow maintenance.

Build on existing App Security and Cloudflare One investments where they fit your architecture.

NEXT STEP

Let's build your
AI-powered workplace.

NTT DATA helps you turn AI experimentation into secure, connected business workflows — powered by Cloudflare OS.

MOVE 01

Discover your first use case

Bring one repeated task, a business owner and the systems involved. We will shape a focused pilot together.

MOVE 02

Prove the outcome

Agree success measures, validate access and outputs, then use the evidence to plan your next step.

Book an AI workflow discovery session

Speak with the NTT DATA team at NTT IGNITE.