Reslab Activity Log
Lightweight, privacy-aware WordPress audit log plugin — tracks logins, content, users, plugin/theme changes, and WooCommerce orders, with IP anonymization, email hashing, and brute-force/mass-deletion alerts.
// tech_stack
A lightweight, privacy-aware audit log plugin for WordPress. It tracks every meaningful change on a site — authentication, content, users, plugins/themes, and WooCommerce orders — into a dedicated database table built for performance, not the options table.
What it tracks
- Authentication — logins, logouts, failed login attempts
- Content — post creation, publishing, trashing, deletion, slug/title diffs
- Users — registration, profile changes including role changes, deletion
- Plugins & themes — activation, deactivation, installs, updates, theme switches
- Settings & navigation — key
wp_optionschanges, menu updates - WooCommerce — HPOS-compatible order status transitions, price/stock changes, coupon use, refunds
Privacy & GDPR by default
- IP anonymization (last IPv4 octet masked) and SHA-256 email hashing, both on by default
- Configurable retention with optional gzip CSV archiving before purge
- Granular capabilities so roles like shop managers only see the event types relevant to them
Alerting
Opt-in hourly checks for brute-force login attempts and mass-deletion activity, with email and webhook alerts (Slack, Discord, Zapier, Make, n8n, or any custom endpoint) plus a PHP action hook for custom integrations.
Admin & API
A dedicated screen under Tools → Activity Log with filtering, inline before/after diffs, and CSV export, plus a read-only REST API for pulling events into external monitoring or SIEM tools.