Cloudflare Open-Sources Void for Company-Built Apps

Cloudflare open-sources Void as companies seek a way to manage applications employees build with artificial intelligence. The release gives organizations a self-hosted place to deploy those applications, while allowing administrators to set who can publish and use them.

The company announced the release Thursday. Void is a collection of three tools, including a platform with an administrative dashboard. Its purpose is to give staff a place to publish their work and give administrators visibility into deployments, logs, resource use and access.

Cloudflare Open-Sources Void for Company Apps

The package includes the Void SDK, Void CLI and Void Platform. The SDK supplies building blocks for full-stack applications made with Vite, including server-side functions and connections to databases and other services. The CLI handles deployment and provisions the required Cloudflare resources. With the platform source now public, Cloudflare open-sources Void for organizations to install and examine themselves.

Running void deploy builds an application, provisions infrastructure and publishes it to Cloudflare. The process also applies any required database migrations. The SDK and CLI were already distributed through npm under the MIT license. Thursday’s release made the full source code, including the platform, publicly available alongside Void 1.0.

The platform’s self-hosted design followed Cloudflare’s acquisition of VoidZero, the company founded by Vue.js and Vite creator Evan You. Michael Dong, a strategy lead at Cloudflare who joined from VoidZero, said the platform was rebuilt so anyone could install and host it on Cloudflare.

Organizations can install an instance using the void platform install command. The setup guides administrators through authentication, database connections and storage.

Void Adds Oversight, With Limits

Administrators can choose who may deploy applications and who may access them. They can inspect deployments, review logs, monitor resource consumption and set usage limits. Identity-provider integration and Cloudflare Access can restrict applications to authorized employees.

Void also includes troubleshooting tools. Developers can inspect error logs through the CLI and roll back a problematic deployment to an earlier version. Dong said Cloudflare uses Void Platform internally and limits it to employees, which he said helps prevent data leaks through employee-built applications by default.

Those controls do not guarantee that an application cannot retrieve sensitive information or send it elsewhere. Void’s documentation says administrators can configure new applications to be public by default, and project owners can later make their applications public. The documented deployment process does not require an IT security review before an application goes live.

Nakazawa pointed to existing access controls and the ability to extend the open-source platform when asked about review or approval mechanisms. He said companies could adjust the platform to fit their needs. Any additional approval process or tighter policy would therefore need to be implemented by each organization.

Self-Hosting Requires Cloudflare Services

Companies running Void Platform need a paid Cloudflare Workers for Platforms plan, which starts at $25 per month. They also need R2 storage and a separately hosted PostgreSQL database, which can add costs. Dong said developers using the SDK to deploy applications directly to Cloudflare do not need a paid Cloudflare plan.

Cloudflare does not currently offer a fully managed Void Platform. That means organizations seeking the shared administrative environment must install and operate their own instance, including its supporting services. Cloudflare open-sources Void with the platform code available for those self-hosted deployments.

You said Void had originally been intended as a commercial product, but the acquisition removed the need to pursue that plan. Cloudflare has said it will keep Vite and VoidZero’s other established tools vendor-neutral. Void’s automatic infrastructure provisioning currently depends on Cloudflare, though Nakazawa said the open-source project could work with the community on additional providers offering the same baseline capabilities.

For now, organizations considering Void must weigh its deployment controls against the work and infrastructure needed to run it. The project’s next step is community development around provider support, without a commitment from Cloudflare to support competing providers. The release also sits alongside other Cloudflare work, including its Deno and Workers plans, the K2 event-streaming beta and its WordPress caching integration. The source report details Cloudflare’s Void release.