On a normal Tuesday, most hotels and restaurants in Monterey can get by with tired Wi-Fi and a card reader that drops now and then. Car Week is a different story. In August 2026 countywide hotel occupancy hit 87.6% and room revenue reached $51.5 million in ten days, according to See Monterey. That's the week a slow network or a frozen terminal costs real money. We've supported inns, restaurants, and tasting rooms from Cannery Row to Carmel Valley since 2008.
So we plan your IT around your busiest days, not your average ones.
What Hospitality IT Has to Handle Here
Visitors spent $3.3 billion in Monterey County in 2025, a record. Hotel tax made up about 30% of the City of Monterey's revenue in fiscal 2023-24. Tourism here comes in spikes, though. The AT&T Pebble Beach Pro-Am runs February 1 to 7, 2027, and the U.S. Open returns to Pebble Beach that June. Sea Otter fills Laguna Seca in April, the Jazz Festival takes over the fairgrounds in September, and the Big Sur Marathon closed 27 miles of Highway 1 for nearly 10,000 runners in April 2026.
Each of those weeks puts thousands of phones on your guest network at once. Your staff's phones and card readers compete for the same air. In Pebble Beach and Big Sur, where cell coverage is weak, a reader that falls back to LTE may not connect at all.
Big Sur has its own problems. The Timber Fire closed 54 miles of Highway 1 in August 2026. Power and internet in Big Sur run over long lines that storms cut. A property there needs a second way online and a plan for taking cards when the main line is down.
The Card Rules Changed in March 2025
Card brands enforce their security rules through a standard called PCI DSS. Version 4.0 added 64 new requirements, and 51 of them stayed optional until March 31, 2025. They aren't optional anymore. The ones that catch small properties most often are listed below.
Every login that can reach your card systems now needs multi-factor sign-in, under requirement 8.4.2. Requirement 5.4.1 asks for controls that catch phishing before staff click. If your booking or deposit page embeds the processor's payment form, you also have to track every script on that page and watch it for tampering. The PCI Council explains that last point in its FAQ on payment page scripts. Sending guests to the processor's own page instead usually takes that work off your plate.
California added rules on pricing too. Since July 1, 2024, the price a hotel or vacation rental advertises has to be the full price, fees included, under the state's hidden fee law. That turns resort fees and service charges into a setting in your booking engine and POS that someone has to get right. We're not lawyers, and this isn't legal advice. We do set up and document the systems so your accountant and processor can check them.
The Front Desk Is Where Attacks Start
Most hospitality breaches don't begin with a hacker breaking through a firewall. They begin with an email or a phone call to someone busy. In March 2025 Microsoft warned about a campaign aimed at hotel staff. Fake Booking.com emails about a negative guest review led to a fake "prove you're human" box. That box tricked staff into running a command that installed password-stealing software.
Attackers also call the help desk. The 2023 MGM attack reportedly started with a phone call asking for a password reset, and MGM put the damage at about $100 million. Federal agencies say the same group still targets help desks. They ask staff to reset passwords and move sign-in codes to new phones.
Most of the fix is habit. We turn on multi-factor sign-in everywhere staff log in, including the property system and booking extranets. We block the "paste this command" trick on front desk computers. And no password gets reset until we've called the person back on a number we already have on file.
How We Support Hotels, Inns, Restaurants, and Wineries
Start with the network. We design guest and staff Wi-Fi built for event weeks by counting how many devices each area has to carry. Guest traffic gets its own network, card terminals get another, and firewall management for card-taking businesses keeps them apart and logs who crosses over.
A second internet line keeps you open when the first one fails. We set up backup connections for inns and tasting rooms on a different carrier, so card readers and reservations keep working. Remote monitoring of POS and front desk systems catches a failing switch or a full disk before Friday check-in.
Phones and cameras round it out.
Our rVoice phone systems for hotels and restaurants route reservation calls to whoever is on shift, and cameras for lobbies, cellars, and parking lots cover the places where most losses happen.
What to Expect
We start with a walk-through of your property and a look at your card setup. You'll get a written list of what to fix first, with prices before any work starts. Then we schedule changes around your calendar, never during a sold-out weekend. Managed clients get security setup in the base plan, a 99.9% uptime commitment, and a technician within 15 minutes on critical tickets. The emergency line answers 24/7.
Hospitality is one of several fields covered in our guide to the industries we support, and most of what we do for hotels applies to wineries and restaurants too.
Frequently Asked Questions
Does my small inn really need to follow PCI DSS 4.0?
Yes. Any business that takes cards has to follow PCI DSS, and the March 2025 requirements apply to small properties too. How much work it takes depends on how cards flow through your systems. A setup that sends guests to the processor's page usually has far less to prove.
Can you keep guest Wi-Fi separate from our card terminals?
Yes. That's one of the first things we set up. Guests, card terminals, and staff computers each get their own network, and the firewall blocks traffic between them.
What happens to card payments if our internet goes down?
With a backup line on a different carrier, the network switches over in seconds and most guests never notice. Without one, you're stuck with whatever offline mode your POS offers. We'll check what your address can get and test the failover before your next big weekend.
Do you work with wineries and tasting rooms in Carmel Valley?
Yes. Tasting rooms have the same card and Wi-Fi needs as restaurants, plus wine club data. Rural internet in the valley is often the weak spot, so we plan the backup connection with that in mind.