iThemes Security (the free predecessor to Solid Security) stores its activity in a familiar set of custom tables: wp_itsec_logs holds every event with module, code, type, and a JSON data column, wp_itsec_lockouts tracks active blocks for hosts and users, and wp_itsec_temp backs the soft lockout flow. The plugin's default screens summarise each table, but the listing UI splits the audit trail across modules rather than presenting one grid.

SleekView reads wp_itsec_logs directly and joins wp_itsec_lockouts on host and user so an event and the block it caused share a row. Module, code, severity, host, user, and the unpacked data JSON become first-class columns. Filters and saved views work like any other SleekView source, so failed-login triage or file-change watchlists are a click rather than a SQL query.

Inline edits route through the plugin's own functions where supported (for example releasing a lockout) and fall back to direct table writes with conflict detection elsewhere. The event log itself stays read-only by design so the audit chain holds.

iThemes Security has been on WordPress sites long enough to accumulate millions of rows in wp_itsec_logs across the network of installs that still run the free build. That history is operationally valuable because patterns at a single site become harder to read once the log spans years, and the plugin's default UI was built around per-module screens rather than a flat grid. Real incidents tend to cross modules: a brute force burst often coincides with a file change in the same window, and a host lockout makes more sense when the failed login chain that produced it sits next to it.

Treating wp_itsec_logs and wp_itsec_lockouts as joined sources turns the audit trail from a record into a working triage surface. Saved views let the next on-call admin reopen the same investigation in one click rather than rebuilding filters from memory. Inline lockout actions keep the action where the evidence is.

The log itself stays read-only so the audit chain holds. iThemes Security captured the trail; a real grid is what makes the trail useful at speed.