AI Hacked a Gym Booking System. What's Behind Your Software Matters.

Choosing gym management software usually starts with features.

Can members book classes? Can you take payments? Is there an app? What does it cost?

But a recent cybersecurity incident highlights another question gym owners should be asking:

How is my business being protected behind the scenes?

An AI assistant reportedly found a vulnerability in a booking platform used by more than 5,000 gyms. It interacted with the platform’s API, bypassed normal booking rules and booked a class months before bookings should have opened.

Worse, the unauthorised booking reportedly removed a legitimate member who was already on the waitlist.

This wasn’t Influx.

But it shows why decisions made behind the scenes matter.

Testing has always mattered to us

Influx has been built and refined for more than 10 years.

The work behind the scenes is just as important as the features you see.

Some of the decisions we make may never appear on a feature list, but they matter when you’re trusting software with your business and member information.

One of those decisions is how we control access to Influx.

Influx does not have a public API.

That’s deliberate. A public API allows outside software to communicate directly with a platform. It can make integrations easier, but it also creates another point of access that needs to be secured and controlled.

Instead, we control what can connect to Influx and how that access works.

That doesn’t mean any system is immune from attack. It means we deliberately limit unnecessary access points rather than opening them simply for convenience.

The screen isn’t the security

If a gym allows bookings to open seven days before a class, simply hiding that class from the member isn’t enough.

With Influx, booking rules are enforced by the system itself — not just by what a member can see in the app.

That matters even more as AI becomes capable of interacting with software in ways a human wouldn’t.

AI makes this even more important

We’re increasingly hearing from clients who have used AI to build websites, apps and other tools they want to connect to Influx.

And that’s exciting.

AI is making it possible for gym owners to build ideas that previously would have required developers, significant time and a much bigger budget.

That opens up huge opportunities for businesses to create tools that work specifically for them.

But there’s an important difference between being able to build something and knowing it’s safe to connect.

AI can help you build it.

It can’t tell you what you may have just exposed.

Look beyond the feature list

When choosing gym management software, features and price matter.

But what you can see is only part of what you’re buying.

New features, integrations and AI tools can look impressive. But what matters is the foundation they’re built on.

We’ve spent more than a decade building, testing and refining what sits behind Influx — because the work you don’t see matters just as much as the features you do.

And we’ll continue to do so.