Command One — find the person, the network and the history

Acquire the target

Enter whatever you have — a username, email address, phone number, real name, domain, IP address, CIDR range or ASN. Command One picks the modules that can act on that identifier.

Run the sweep or recon pipeline

Identity targets fan out to a parallel sweep across public sources. Infrastructure targets run as an ordered pipeline instead, each stage feeding the next; heavier tools are dispatched to your own self-hosted worker fleet.

Correlate

Raw hits are normalised into unified entities — accounts, identities, hosts, addresses, services, archive snapshots — and linked by typed relationships. Matching entities merge and gain confidence.

Report

Each investigation becomes a case file with scan logs, per-source evidence, raw payloads and an audit trail you can hand over.

CommandDeck workspace

Its own authenticated workspace with a case selector: pan, zoom and drag the graph, search and filter by confidence, collapse clusters, and keep the arrangement you built — layout, zoom and filter state are saved per case and restored on any device.

Analyst notes, flags & tags

Record your reasoning against the evidence itself. Notes, flags and tags persist with the case and stay private to your account; raw scan findings are never edited.

Manual links & private evidence

Draw the relationships you believe hold — rendered visually distinct from collected evidence — and attach screenshots or documents to the case in private storage.

Source provenance & confidence

Every finding keeps its module, raw payload, timestamp and confidence score, so any claim can be traced to the source that produced it and independently re-checked.

Reliable exports

PDF case reports and CSV exports save properly on the web and in the mobile apps — written to your device and handed to the system share sheet, with an honest result either way.

Watchlists

Save targets you care about and re-sweep them on a schedule; new findings surface as changes against the last run rather than a fresh pile of results.

Scan notifications

In-app alerts when a sweep finishes, plus an email summary from notify.com1.cloud so long worker jobs don't need babysitting.

Shareable case files

Generate a read-only link to a case so a colleague or client can review the findings and evidence without an account — revoke it any time.

Credits meter & billing

The header meter shows your daily allowance, its reset countdown and your purchased balance separately. Top up, review purchase history and manage your account in one place.

Faceted intel feed

Slice every finding by category, module, execution mode, target type, case, confidence band or recency — with a socials-only shortcut for footprint work.

Grouping & sorting

Group results by category, module, target, case or confidence, and sort by confidence, corroboration, recency or platform.

Corroboration scoring

Independent modules that agree on the same entity merge into one record and lift its confidence; single-source hits stay flagged as leads.

Evidence trail

Each record keeps its source module, raw payload and timestamps, so anything you report can be re-verified by someone else.

Reports & sharing

Export the visible set as CSV, generate a branded PDF case file with executive summary and findings register, or hand over a revocable read-only link.

CommandDeck workspace

Open any case in the dedicated CommandDeck workspace to pan, zoom, filter, cluster and annotate the relationship graph without changing the underlying scan evidence.

Agent integration

A read-only agent endpoint lets your own AI tooling list cases and search findings under your account, secured with OAuth.