NexUs
Security hardening and go-live for a restaurant SaaS
NexUs (app.mynexus.hu) is an app for restaurants: an AI assistant for the venue's own recipes and rules, checklists, HACCP logs, training and scheduling. The product is developed by NOMA Kereskedelmi Kft. We did the security and reliability repair before go-live: data separation per restaurant, sign-in, logging, a test environment and the release process.
Tech stack
PostgreSQL
Supabase
React
Vite
Resend
Vercel
CloudflareThe challenge
The platform was built fast. Before the first restaurants arrived, it had to be certain that one restaurant's data never shows up at another, that sign-in can't be bypassed, and that a broken release can't reach production.
What we delivered
- The findings of four audits merged into a 26-item repair plan
- Data separated per restaurant in the database, on the server, in file storage and in the admin area
- Two-factor authentication for operator sign-in, a 6-digit PIN and bot protection for staff sign-in
- A separate test environment, automatic checks before every release, regression tests
The solution
Data per restaurant
Each restaurant sees only its own data: in the database, on the server, in file storage and in the admin area. When a staff member is deleted, their HACCP signatures remain.
Sign-in
Mandatory two-factor authentication for operators, with recovery. Staff sign in with a 6-digit PIN, with bot protection on suspicious attempts.
Releases and log
A separate test environment, automatic checks and regression tests before every release. The action log can't be edited or deleted afterwards.
Measurable results
repair plan from four audits
database migrations in the first release round
release rounds in September 2026
Put in order before the first restaurants
The repaired version went live in two rounds in September 2026. Restaurant data runs separated, operator sign-in uses two factors, and every release passes through a test environment.