Cloudflare recently introduced Kitesurf, a lightweight browser built for automated workloads. Kitesurf runs browser components in isolated WebAssembly/Rust environments on Cloudflare Workers and supports the Chrome DevTools Protocol, allowing tools such as Playwright and Puppeteer to drive it with lower resource overhead than a full Chromium browser.
Designed for tasks such as screenshots and HTML extraction, Kitesurf runs each page or out-of-process iframe (OOPIF) in a long-lived Dynamic Worker, isolated with its own JavaScript environment and DOM. Kitesurf builds the DOM by parsing HTML and CSS and executing JavaScript, using components from the Rust-based Blitz rendering engine and Firefox’s Stylo CSS parser.
Kitesurf is not yet a replacement for Chromium, as it lacks support for video, WebGL, realistic TLS-based bot challenges, and long-lived authenticated sessions. While agents need browsers to perform many tasks, Celso Martinho, Ruskin Constant, Rui Figueira, and Luís Duarte argue:
Browser engines like Chromium were built for humans, not agents, and they come with overhead that AI models simply do not need. They consume so much memory and compute that providing every agent with its own instance is prohibitively expensive, restricting large parts of the Web to only the most sophisticated and costly AI models with higher parametric knowledge, while locking out many other agentic applications.
According to Cloudflare, AI agents should prioritize low token usage, scalability, performance, cost, structured content, and tool safety over visual fidelity and features such as tabs, extensions, and synchronization.
Source: Cloudflare blog
PageRenderer is the Kitesurf component that renders a page’s DOM and styles into an image or PDF. It fetches fonts and images, rasterizes the scene using Blitz Paint and Parley, and returns the resulting buffer to the Engine over Workers RPC. Martinho, Constant, Figueira, and Duarte add:
Kitesurf is great for AI agents that need to render pages but can accept the trade-offs of not using a full-featured, pixel-perfect Chromium browser (...) Think of Kitesurf as an ephemeral, fully-isolated, stateless engine designed to exist only for the duration of a task, that scales well for bursty, AI-driven workloads.
Source: Cloudflare blog
On Hacker News, many question the potential conflict of interest between a company running the largest CDN network and offering DDoS and cybersecurity products, with user QuantumNomad_ questioning:
Does Cloudflare the CDN allow these browser instances to bypass their own anti-bot mechanisms? Or will Cloudflare the CDN block them the same as if someone was running scraping bots from a different provider?
On Reddit, practitioners are cautiously optimistic about Kitesurf’s approach while questioning why the code is not yet open source and why its changes have not been upstreamed to Blitz. User seventeencups comments:
Cloudflare building tools to help AI scrape people's websites while also selling "please stop AI from scraping my website" as a SaaS product is the most blatant "playing both sides" I've seen in a while,
Nico Burns, the creator of Blitz, confirms:
This is built on top of Blitz: a new modular (open source) browser engine that I've been building for the last 2.5 years. I wasn't involved in building Kitesurf, but I am informed that they intend to open source and upstream their patches.
The project is still experimental, with important compatibility work and CDP/WPT support ahead. Cloudflare says it plans to open source the project soon, but there is no code available yet.