01
Acquire the target
Enter whatever you have — a username, email address, phone number, real name or domain. Command One picks the modules that can act on that identifier.
people-search command center
Find the person behind the handle
Command One unifies open-source intelligence tooling — username enumeration, email and phone recon, domain mapping and correlation — into one operator console with live telemetry.
free registration · public sources only
what this is
One console instead of twenty terminal windows
People-search work normally means juggling a dozen open-source scripts, each with its own install, output format and quirks. Command One replaces that with a single investigation surface: you enter an identifier, pick your modules, and watch results stream in live.
Everything runs against public sources only — no breach dumps, no paid data brokers, no scraping behind logins. Each result keeps the source that produced it, so any conclusion can be traced back and re-verified by someone else.
17
modules live: 5 native + 12 open-source tools
150+
platforms probed per username sweep
1
unified findings schema across every module
branded case reports, plus CSV export
how it works
From identifier to case file in four moves
02
Run the sweep
The native engine fires hundreds of concurrent public-source checks in-browser-time, while heavier tools are dispatched to your own self-hosted worker fleet.
03
Correlate
Raw hits are normalised into unified entities: accounts, identities, infrastructure and media. Matching entities merge and gain confidence.
04
Report
Each investigation becomes a case file with scan logs, per-source evidence, raw payloads and an audit trail you can hand over.
modules
What you can run
Username sweep
Native probes across 150+ platforms, plus Sherlock, Maigret, Snoop, Blackbird, socialscan and WhatsMyName on the worker fleet — all confidence scored.
Email recon
Mail-exchange validation, disposable-provider detection, Gravatar discovery, handle derivation and Holehe registration checks across hundreds of services.
Phone intelligence
E.164 normalisation, country and carrier hints, then Ignorant registration checks against messaging and consumer platforms.
Domain & infrastructure
DNS records, certificate-transparency subdomains, plus theHarvester and Sublist3r passive enumeration for the full external footprint.
Identity expansion
Turn a real name into ranked handle candidates and sweep each one; GHunt resolves Google account artefacts from an address.
Correlation & unified findings
SpiderFoot correlation feeds the same schema as every other module: deduplicated entities, filterable facets, CSV and branded PDF case reports.
Tool credits and licences are listed on the credits page.
working the results
Filter, corroborate, export
Faceted intel feed
Slice every finding by category, module, execution mode, target type, case, confidence band or recency — with a socials-only shortcut for footprint work.
Grouping & sorting
Group results by category, module, target, case or confidence, and sort by confidence, corroboration, recency or platform.
Corroboration scoring
Independent modules that agree on the same entity merge into one record and lift its confidence; single-source hits stay flagged as leads.
Evidence trail
Each record keeps its source module, raw payload and timestamps, so anything you report can be re-verified by someone else.
Reports
Export the visible set as CSV, or generate a branded PDF case file with an executive summary and full findings register.
Agent integration
A read-only agent endpoint lets your own AI tooling list cases and search findings under your account, secured with OAuth.
who uses it
Built for verification work
Due diligence
Verify that a counterparty, contractor or applicant is who they claim to be before you sign.
Fraud & trust and safety
Link throwaway accounts, spot recycled handles and map the infrastructure behind a scam network.
Journalism & research
Trace a public figure's footprint across platforms with citable sources for every claim.
Personal exposure audit
Run yourself as the target and see exactly what an outsider can assemble about you.
rules of engagement
Public sources, logged actions, lawful use
- Only openly accessible sources are queried — nothing behind a login or paywall.
- Every scan is written to an audit trail tied to the account that launched it.
- Results are signals, not proof. Treat a hit as a lead to verify, never as a conclusion about a person.
- Harassment, stalking and unlawful profiling are grounds for immediate account termination.