- 19/19 passed, 0 failuresLive tests (multilingual + security)
- RO, HU, ENLanguages supported live
- 6/6 (SQL injection, phishing, jailbreak, malware, credential theft)Attack scenarios blocked
The challenge
Two HoReCa businesses, two very different profiles:
- Pub For You — a local pizzeria in Târgu Secuiesc, with customers writing in Romanian and Hungarian, asking about hours, address, menu, and delivery.
- Protap Rotisor — national spit-roast catering (pork, lamb, veal) for weddings, christenings, and events, with customers who want a fast quote, not a complicated form.
Both needed instant answers, in the customer’s own language, without adding extra staff on the phone — and without the risk of an AI bot “hallucinating” a wrong price or wrong availability.
What we built
A chatbot on Cloudflare infrastructure (Worker + D1 + Vectorize), with a separate knowledge base for each business. The core principle: the chatbot only answers from real, verified information — if it can’t find the answer in the knowledge base, it doesn’t invent one, it clearly points to phone or WhatsApp.
For Protap Rotisor, any quote or booking request is handled the same way: the bot explains what’s offered, but routes the actual booking to a phone call — because event details (date, headcount, menu) deserve a real conversation, not an automated form.
We ran a dedicated security audit and hardened the system with:
- Strict origin validation for requests (replacing simple “contains the domain” matching, which could be bypassed)
- Automatic refusals for hacking, phishing, malware, or jailbreak requests — in Romanian, English, and Hungarian
- Multi-tier rate limiting — per 10 seconds, minute, hour, day, and session
The result
We ran a live test suite with real prompts in all three languages — business questions, off-topic questions, and six different attack attempts (injection, phishing, jailbreak, malware, credential theft).
19 out of 19 tests passed. Zero errors, zero wrong answers, zero security gaps.
The bot answers simple questions correctly (“What are your opening hours?”), correctly redirects booking requests to phone/WhatsApp, and clearly refuses any abuse attempt — in all three languages.