Cloudflare open-sources Void platform for secure internal app deployment

Cloudflare has open-sourced Void, a new software development kit, command-line interface, and self-hosted platform designed for building and deploying full-stack Vite applications. According to the company, the release aims to help organizations encourage internal application development while maintaining strict security controls over cloud resources.

The Void suite bundles server routing, typed data access, and Cloudflare deployment into a unified workflow. Developers can install the tools via npm and use the SDK to build server and client components together. The system automatically provisions necessary Cloudflare resources, such as databases and queues, during the deployment process.

Context and Background

Cloudflare originally intended to build a private platform for all users to deploy applications. However, after VoidZero joined Cloudflare, the company shifted its strategy to open-source the platform. This decision followed observations that companies wanted to support "vibe-coded" internal apps but were concerned about giving every employee direct access to cloud infrastructure.

Void addresses this tension by providing a shared deployment environment. Administrators can install the Void Platform within their own Cloudflare account, which utilizes Workers for Platforms. This setup allows admins to inspect deployments, set resource limits, and provide guardrails while enabling broader teams to ship applications safely.

Who Is Affected

The tool is designed for teams that include non-technical members who may use coding agents to build applications. According to Cloudflare, designers or operations staff can create prototypes or internal dashboards and deploy them to the same platform as engineering teams. This workflow reduces the time to ship internal apps from days or weeks to minutes.

Users need a Cloudflare account with Workers for Platforms and R2 enabled to install the platform. Once set up, approved users connect via the Void CLI. The SDK supports popular JavaScript UI frameworks like React and Vue, offering features such as file-based API routing, pre-rendering, and end-to-end type safety from the database to the user interface.

What should you do?

Organizations interested in standardizing internal app development should evaluate whether Void’s open-source model fits their security requirements. Teams should review the documentation to understand how resource provisioning works within their specific Cloudflare accounts. Since the platform is open source, companies can fork the code to adapt it to their unique compliance needs or integrate it with existing internal systems.

What to do and how to stay safe: Cloudflare

• Review the Void documentation to understand how the SDK handles resource provisioning and type safety.
• Ensure your Cloudflare account has Workers for Platforms and R2 enabled before attempting installation.
• Configure admin-level resource limits and access controls to prevent unauthorized usage of cloud resources.
• Test the deployment workflow with a small prototype to verify that security guardrails function as expected.

Step-by-step guide: Mobile Device Security: How to Protect Data Beyond Passwords

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Is Void free to use?

Yes, Cloudflare has open-sourced the Void SDK, CLI, and Platform as a single JavaScript package available via npm.

Does Void require a separate Cloudflare account for each user?

No, the Void Platform allows teams to share a single deployment environment within one Cloudflare account.

Which UI frameworks does the Void SDK support?

The SDK ships with adapters for popular JavaScript UI frameworks such as React and Vue.