Security
A secure, well-maintained hotel website
An outdated, unpatched website looks suspicious to guests and is a risk for the hotel. We build and run your site so it has few weak points, and if anything goes wrong, we know about it immediately.
How we protect it
Three layers that rule out most problems from the start
A smaller attack surface
The site is static: no public database and no login admin area on the website that could be attacked. Editing happens separately, in a protected interface.
Encrypted connection
An SSL certificate on every page, so the browser never flags the site as “not secure” and form data travels encrypted.
Updates and backups
We update the system components regularly and keep versioned backups of the content, so even a faulty change can be rolled back.
Cloudflare network
Running on one of the world's largest networks, not on small shared hosting
We host the sites on Cloudflare's global network, the same network that serves large online shops and news portals. That is what makes it fast and able to handle unexpected load.
Overload protection
Sudden mass requests (DDoS attacks) are filtered out automatically by Cloudflare before they reach the site.
Fast loading from anywhere
Copies of the site sit on servers around the world, and each guest loads it from the nearest one.
Suspicious traffic filtering
Many known malicious bots and attack patterns are stopped at network level.
Automatic HTTPS
An encrypted connection on every page, with automatic certificate renewal.
Email protection
No one can send email in the hotel's name
Fraudsters often send guests fake booking or payment emails in the hotel's name. Email authentication on your domain makes this harder, and the hotel's genuine emails are also less likely to end up in spam.
What we monitor
Continuous monitoring as part of hosting and maintenance
So you don't hear it from a guest when something isn't working.
Monitoring frequency and response time depend on the hosting plan you choose. Plans and pricing →
Guest data
Card data never touches the website
Booking and payment take place in the booking engine. The website's forms only ask for what an enquiry needs, and the data arrives over an encrypted connection.
The enquiry forms are short: name, contact details, dates, number of guests.
The domain, the content and the photos belong to you, and can be handed over if you ever choose a different provider.
Frequently asked questions
Security in brief
Does the site handle card data?
No. Payment happens in the booking engine; guests' card details never touch the website.
What happens if the site goes down?
Uptime monitoring alerts us immediately. On working days we respond within the time set in your plan, at weekends as far as we can, with priority in the Premium plan.
Who owns the domain and the content?
You do. The domain stays in your name, and if you ever choose another provider, we hand over everything needed.
What happens if the site suddenly gets a flood of requests?
The site runs on the Cloudflare network, which automatically filters out denial-of-service (DDoS) attacks before they reach the site. Regular visitors are served from servers around the world, so even a sudden surge in traffic won't slow it down.
Can someone send fake emails in the hotel's name?
We set up email authentication (SPF, DKIM, DMARC) for your domain. Mail systems can then recognise when someone tries to send email in the hotel's name, and the hotel's genuine emails are less likely to end up in spam.
Can complete security be guaranteed?
Nobody can guarantee complete security. What we commit to: a small attack surface, regular updates, backups, continuous monitoring and, if something goes wrong, a fast response.
See what you would get, with your own hotel
Send us your website address or the name of your property, and within 2 working days we will build a clickable concept of your new homepage. Free, with no obligation.