Availability and bookings as separate Supabase entities, wired into a public-facing assessment booking page and an operator dashboard. Built so security firms can expose their assessment calendar without double-booking senior engineers.
The Problem
Security firms running pentests, SOC 2 advisory, and MDR onboarding calls manage capacity manually. Engineers handle availability over email or shared spreadsheets. Prospects land on a site with no self-serve booking, so a salesperson is required for every single slot confirmation. Concurrent engagements create double-booking. Senior engineers get interrupted.
The structural failure: availability and bookings are treated as one thing. When a slot gets consumed, nothing updates the source record. The next prospect sees the same slot as open.
The Solution
Two-table separation. The assessment_slots table is the capacity layer (operator-controlled). The assessment_bookings table is the consumption layer (prospect-facing). A booking inserts a record into assessment_bookings and flips the slot's status to booked in a single transaction. The public page only reads available slots. The same slot cannot be booked twice.
Key Features:
- Admin dashboard for operators to add, view, and manage assessment slots by service type
- Public booking page with service filter, date display, and slot selection
- Atomic status update: booking insert and slot status flip happen together, no race condition
- Booking confirmation view delivered immediately after submission
- Operator overview with today's count, upcoming count, total bookings, and pending confirmations
Use Cases
Offensive Security Firms (Pentest / Red Team): Expose Web App Pentest, API Assessment, and Red Team Engagement slots to prospects directly. No sales call required to reserve capacity. Senior engineers see confirmed bookings, not email threads.
GRC Advisory Practices: SOC 2 advisory and compliance readiness sessions can be self-scheduled by client security teams. The operator controls how many slots are available per week without touching code.
MDR Providers: MDR onboarding calls are high-friction to schedule. A public slot picker reduces the onboarding cycle from 3-5 email exchanges to a single form submission.
Impact
- Eliminates manual slot coordination for assessment scheduling, typically 2-4 hours per week per operator
- Prevents double-booked engagements through atomic slot locking, a failure mode that costs firms senior engineer time and client trust
- Converts website visitors into booked prospects without a sales intermediary in the loop
Built by Kunsh Tanwar | ETXcyberops | [email protected]
