Cloudflare Launches Kitesurf, a Cloud Browser Built for AI Agents Instead of Humans

Cloudflare built a browser this week that no human will ever look at.

The company launched Kitesurf, a cloud-hosted browser designed specifically for AI agents, according to TechCrunch. No tabs. No themes. No extensions. Nothing a person needs. Just a stripped-down engine built to let software navigate websites, fill out forms, take screenshots, and pull structured data.

AI is shifting from chatbots that answer questions to agents that actually do things online. Booking flights, filling forms, scraping data. All of that requires a browser. Up until now, developers building these agents were stuck running full Chromium instances, according to TechRepublic, which are bloated with features built for humans that machines don't need.

The Numbers Cloudflare Is Selling

Cloudflare says Kitesurf uses 3.1 to 3.8 times less CPU than Chromium and 4.7 to 7 times less memory, depending on the task, according to TheNextWeb, which cited Cloudflare's own 14-URL test corpus. For companies running thousands of concurrent AI agent sessions, that's real money. CPU and memory are what drive cloud bills, not raw speed.

The tradeoff: Kitesurf is about 1.7 to 1.8 times slower on wall-clock time than Chromium, according to TechRepublic and iClarified. Cloudflare attributes that gap to Chromium's mature JIT compiler outrunning a newer, cold software renderer. The company says it's actively working on rasterization and image encoding to close the gap.

Built Fast, Built Different

Cloudflare says it built Kitesurf in 12 weeks, running entirely on its own serverless platform, Workers, according to TechCrunch. The browser combines a modular rendering engine from Blitz, Firefox's Stylo CSS parser, and Boa, a Rust-based JavaScript engine, all compiled to WebAssembly and run inside Cloudflare's V8 isolates, according to iClarified.

The project's origin traces back to Obscura, an open-source Rust headless browser engine for AI automation. Cloudflare's first proof of concept was literally a port of Obscura to Workers, the company said, according to TechCrunch and iClarified.

It already passes more than 215,000 Web Platform Tests, with hundreds more added weekly, and correctly renders sites like Wikipedia, Hacker News, and TodoMVC, a standard benchmark for JavaScript frameworks.

Security Was the Point, Not an Afterthought

AI agents face a threat model regular browsers were never built for. Prompt injection attacks, where a malicious webpage tries to hijack an agent's instructions, are a real and growing risk. Cloudflare designed Kitesurf with isolation between every page load, treating each session as stateless and untrusted, according to TechRepublic. If an agent hits a compromised page, that page can't contaminate whatever else the agent is doing.

The design isolates security concerns in a way that purpose-built agent browsers need, rather than relying on sandboxed Chromium instances.

What It Can't Do Yet

Kitesurf can't play video, render WebGL, negotiate the TLS handshakes that many bot-detection systems require, or start authenticated sessions needing persistent login state, according to iClarified. That's a meaningful limitation. A lot of real-world agentic tasks, like logging into a bank account or a corporate dashboard, require exactly the kind of persistent, authenticated session Kitesurf currently can't handle.

Cloudflare is betting those gaps get closed over time. The company plans to open-source Kitesurf once it's more mature and eventually let customers run their own instances on their own infrastructure, according to TheNextWeb.

The Bigger Play

TheNextWeb's coverage flagged something the other outlets glossed over: Cloudflare is simultaneously blocking AI crawlers that scrape content without paying, while building infrastructure for agents that do pay through Browser Run. That's a deliberate two-sided bet. Charge the bots that take content for free, sell tools to the bots that are willing to pay for cheaper, purpose-built infrastructure.

It's a smart business model if agentic AI traffic keeps growing the way it has. Bots already generate the majority of web traffic, and AI agent activity specifically grew nearly 8,000% over the past year, according to TheNextWeb, citing Cloudflare's own data. Whether that explosive growth rate holds up, or whether it's an early-cycle spike that levels off once agent adoption matures, is the open question nobody in this batch of coverage answers.

Kitesurf is free during beta through Cloudflare's Browser Run product. Developers can turn it on today by adding a browser=kitesurf parameter to existing Browser Run endpoints, according to iClarified, with no migration required for teams already using Puppeteer or Playwright.