Cloudflare Turnstile is the privacy-friendly captcha alternative Cloudflare ships as a free service. The official WordPress integration adds the widget to login, registration, lost-password, comments, WooCommerce, and a handful of third-party form plugins. The plugin itself stores its site key, its secret, and the per-form coverage toggles in wp_options and verifies challenges against the Cloudflare siteverify endpoint without writing its own log row.

That minimal footprint is by design and not a problem, except for the operator who needs to know which forms are actually protected. The signal lives across wp_options for the toggle state, the Contact Form 7 or WPForms tables for the form schema, and the submission logger of choice for the outcome. Stitching those three by hand is the kind of work the admin should already do.

SleekView reads the Turnstile coverage map from wp_options and joins it to the active form list and the submission log. Each row is one protected form with its widget mode, its source, its submission count, and a derived health status. The plugin keeps owning the verification; SleekView turns the configuration plus the outcome into a workspace.

Cloudflare Turnstile is intentionally light on the database, the heavy lifting happens at Cloudflare's edge and the local plugin only carries the keys and the per-form toggle. That design is good for privacy and bad for the operator who needs to know which forms are actually protected right now. The signal lives across three places, the Turnstile coverage map in wp_options, the form schema in the form plugin's tables, and the submission log that records how many real requests came through.

Reading those three together by hand is the kind of work the admin should already do. SleekView reads them and renders one grid where every protected form sits next to its widget mode, its submission count, and a derived health status. Security leads catch a toggle that flipped off during an update.

Ecommerce ops confirm the checkout widget is still in the right mode. Site reliability sorts by submission volume to find the loudest unprotected form. The captcha keeps doing what Cloudflare designed it to do, and the team finally gets the coverage workspace the plugin never tried to ship.