Both sites are safe.
Cloudflare's firewall checks every visitor before they reach your sites. Anything harmful is stopped at the door.
Online this month · padlock valid
Online this month · padlock valid
Attacks blocked today
Last backup today · kept 7 days
How visitors reach your sites
Every visit goes through the same path- VisitorA customer, or someone up to no good
- Cloudflare firewallChecks every visit and stops attacksCloudflare Pro
- Secure connectionKeeps the padlock on the whole way to your siteFull (strict) encryption
- Your two sitesVending and catering, still on your current hostingVercel
- Customer dataLocked, backed up every nightSupabase
Attacks blocked
Last 14 days · 91 totalWhat it stopped
Last 14 daysThe guard at the front door.
These rules come ready-made from Cloudflare and follow OWASP's list of the most common website attacks.
Firewall mode
Block: harmful visits are stopped before they reach your sites.
Recent activity
Newest first| Time | Site | What happened | From | Result |
|---|
Each person sees only what they need.
Customer details stay in your private Supabase database. Card numbers are never stored here. Stripe keeps them.
Who can see what
Set by data rules| Who | Their own booking | All bookings | Prices | Card numbers |
|---|---|---|---|---|
| A customer | Yes | No | Public prices only | No |
| You (two-step login) | Yes | Yes | Yes, can edit | No, Stripe keeps them |
| Our team (during setup) | Yes | Test data only | Yes | No |
| Anyone else | No | No | Public prices only | No |
Test the lock
Pretend to be a customer who tries to open someone else's booking.
Backups
Every night at 3:00 AMAll 14 issues are fixed.
Each fix is in plain words, with the technical name underneath for anyone who asks.
You hear about problems right away.
Urgent problems email you right away. Everything else waits for Monday's safety email.
Flat price: Cloudflare Pro is $20 a month per site, paid yearly. You get an email if the bill passes $50.