Type a name, email, phone or username → one report of everything public, each hit stamped with where it came from.
Launch Command One → — free · 100 credits a day · public sources only · no card
The whole trick, in one line: one search box replaces the ~20 terminal windows OSINT normally takes. Same free tools — Sherlock · Holehe · GHunt · SpiderFoot — just pre-wired, correlated and $0. You pay nothing to skip the install.
Never done this before? Three steps.
① type one thing you already know
② it checks 150+ public sources for you
③ you get one PDF — every line shows its source
| You type… | …you get back |
|---|---|
 a username |
every site it is registered on |
 an email |
where it is signed up · disposable? · Gravatar |
 a phone |
country / carrier + apps that use it |
 a real name |
ranked guesses at their handles |
| a domain |
its subdomains + public records |
Best first scan — run it on yourself. See what a stranger can pull together about you in 2 minutes, then go clean it up.
Already run Sherlock & Holehe?
No black box — here is the tool sitting under each module:
| Module | What it runs |
|---|---|
| Username sweep | Sherlock · Maigret · Snoop · Blackbird · socialscan · WhatsMyName |
| Email recon | Holehe + MX / disposable / Gravatar |
| Phone intel | Ignorant + E.164 / carrier hints |
| Domain & infra | theHarvester · Sublist3r + DNS / CT-logs |
| Identity expansion | GHunt (Google artefacts) + ranked handles |
| Correlation | SpiderFoot → merge · dedupe · confidence-score |
↳ Modules that agree merge and lift confidence; lone hits stay flagged as leads. Export CSV or a branded PDF. A read-only OAuth agent endpoint lets your own AI tooling query your cases.
🧰 Rather self-host? The 12 free repos it fuses
All open-source, free to run yourself, no Google sign-in needed:
- Sherlock — username → 400+ sites
- Maigret — username → 3000+ sites + report
- Snoop — username OSINT (RU / EN)
- Blackbird — fast username + email search
- socialscan — email / username availability
- WhatsMyName — community username-enum dataset
- Holehe — email → the accounts it registered
- Ignorant — phone → the accounts it registered
- theHarvester — domain emails / subdomains / hosts
- Sublist3r — subdomain enumeration
- GHunt — Google account OSINT
- SpiderFoot — 200+ modules + correlation engine
↳ Command One just keeps them installed, updated, correlated and reportable in one place — the raw power is free either way.
🛡️ What it will NOT do
Public sources only — nothing behind a login or paywall- No breach dumps · no paid data brokers · no login bypass
- Google sign-in only makes your account — it never reads your Gmail, Drive or contacts
- Every scan is logged to an audit trail on your account
Results are leads, not proof — verify before you rely on them
Harassment, stalking or unlawful profiling = account terminated
🎯 Who this is for
- Due diligence — check a counterparty / contractor / hire is who they claim before you sign
- Fraud, trust & safety — link throwaway accounts, spot recycled handles, map scam infrastructure
- Journalism & research — trace a public figure’s footprint with a citable source per claim
- Personal exposure audit — run yourself, see what is exposed, clean it up
One box, seventeen tools, every answer with a receipt — the twenty terminals were never the point.
!