premium modules
Command One's premium modules query commercial data providers we pay for per search. They sit in the same console, write into the same findings schema and appear on the same case map as everything else — they just bill against purchased gold credits instead of your free daily allowance.
50 gold credits for £4.99 · never expire — or unlimited runs on every module for £49.99 per month
the roster
email · username · phone · domain · IP
Searches the Intelligence X index across leaks, pastes, darknet captures and document dumps. Each hit records the bucket, source name, date and a direct record link so you can cite exactly where an artefact came from.
Reach for it when: Deep historical exposure on an identifier that returned nothing from public endpoints.
email · username · name · phone · domain · IP
Queries DeHashed for breach-exposure links between identifiers and breach sources. Command One keeps the useful identifiers and breach provenance but deliberately discards password and hash fields before findings are stored.
Reach for it when: Confirming whether an identity or infrastructure lead appears in known breach data without retaining credential material.
domain · email
Discovers public professional email addresses associated with a domain and verifies individual addresses with Hunter.io confidence and deliverability signals.
Reach for it when: Expanding a company domain into likely contact addresses, or checking whether an email lead is deliverable before deeper analysis.
email · username · phone
Tells you which breach corpora expose an identifier, with source names, record counts and password hash hints. Fast enough to triage a list of addresses before committing to a full workup.
Reach for it when: Account-security assessments and confirming whether a lead's credentials are already public.
phone
Carrier-grade lookup for a subscriber number: current carrier, line type, country routing, portability and validity — the data public parsing libraries cannot infer on their own.
Reach for it when: Deciding whether a number is a real mobile subscriber, a VoIP throwaway or a landline.
how billing works
Free daily allowance
50 credits refreshed at 00:00 UTC, no roll-over. Covers standard modules, native and fleet, plus case files, exports, watchlists and shared links.
Gold credits (purchased)
Bought in 50-credit packs, never expire, and the only bucket premium modules can draw from. Standard modules fall back to gold only once the daily allowance is spent.
Premium modules query paid intelligence sources we pay for per search, so they run on gold credits from a credit pack rather than the free daily allowance — or on a Premium Unlimited subscription, which covers every module. More premium sources are added regularly.
questions
Premium modules query paid intelligence sources we pay for per search, so they run on gold credits from a credit pack rather than the free daily allowance — or on a Premium Unlimited subscription, which covers every module. More premium sources are added regularly.
Buy a credit pack from the Credits page in the console — 50 gold credits for £4.99. Gold credits never expire, so a single pack can sit in reserve until a case actually needs a premium source.
No. The 50-credit daily allowance covers standard modules and the worker fleet. Premium modules bill only against gold credits, so a premium source can never silently drain your free budget.
No. The DeHashed integration uses a strict allow-list and discards password, hash and raw credential fields before a finding can be stored. Only useful identifiers and breach-source provenance are retained.
You still see the sources queried and the exact response status, and the run is written to your audit trail. Premium sources are metered by the provider per search, so a completed query is charged whether or not it produces a hit.
Yes — premium sources are added as we license them, and every new one appears in the module roster with its credit cost before you can run it. Nothing is enabled by surprise.
Register free, work your cases on the daily allowance, and top up when a case genuinely needs a paid source. Orders are processed by our reseller Paddle.com, the Merchant of Record for all orders.
'%3e%3cpath%20d='M790%20210H385L205%20390v244l180%20180h405'%20fill='none'%20stroke='url(%23cyan)'%20stroke-width='104'%20stroke-linejoin='bevel'%20stroke-linecap='square'/%3e%3ccircle%20cx='520'%20cy='512'%20r='166'%20fill='none'%20stroke='url(%23red)'%20stroke-width='28'/%3e%3cpath%20d='M520%20306v412M314%20512h412'%20fill='none'%20stroke='url(%23red)'%20stroke-width='24'%20stroke-linecap='square'/%3e%3cg%20stroke='url(%23red)'%20stroke-width='12'%20stroke-linecap='square'%3e%3cpath%20d='M520%20374v42M520%20438v35M520%20551v35M520%20608v42'/%3e%3cpath%20d='M382%20512h42M446%20512h35M559%20512h35M616%20512h42'/%3e%3c/g%3e%3crect%20x='508'%20y='494'%20width='24'%20height='36'%20rx='2'%20fill='url(%23red)'/%3e%3c/g%3e%3c/svg%3e)