Knowledge base
Runbooks, procedures, and environment notes for each client, with version history and restore.
DOCUMENTATION · CREDENTIAL VAULT
IT documentation software with a built-in credential vault
Documentation keeps each client’s knowledge base, assets, locations, and contacts in the same console as your tickets and endpoints. Credentials live in a vault with its own permission and its own encryption, not in documents.
Command screenshot with sample data. Names are fictional.
- Knowledge base, assets, locations, contacts
- Version history with restore
- A vault with its own permission
- One-time share links for credentials
DOCUMENTATION
Documentation for every client
Runbooks, environment notes, and the facts about each client’s estate, organized per client and kept current.
Assets, locations, and contacts
Record each client’s assets, locations, and contacts. The Assets tab includes a network view.
Role-based access
Read and edit rights are role-based, and documentation is kept per client.
CREDENTIAL VAULT
A credential vault, separate from documentation
Being able to read a client’s documentation does not let anyone read its passwords. The vault is its own boundary.
Its own permission
Credentials need a vault permission of their own, separate from documentation access.
Encrypted per client
Credentials are stored in their own encrypted table, using AES-256-GCM with a separate key for each client.
Audited reveals
Password reveals, one-time (TOTP) codes, and share links are recorded with who did it and for which client.
Short-lived copies
A copied password clears from the clipboard after 30 seconds. The web app and browser extension keep no offline copy, and the mobile app asks for a biometric check before it reveals one.
- Vault permission checkedSeparate from documentation access
- Reveal recordedWho, and for which client
- Clipboard clearedAfter 30 seconds
ONE CONSOLE
Connects with the rest of Command
Service Desk (PSA)
Ticketing, todos, a shared calendar, and a knowledge base, with SOC and service work on one board.
Overwatch (RMM)
Monitoring, patching, jobs and automation, and remote control, under policies at every scope.
Microsoft 365 management
Users, groups, conditional access, and mailboxes for every client tenant.
Sentry EDR and Web Protection
Endpoint protection and DNS filtering inside Aegis, on the same policy engine.
Every Command module
Service delivery, endpoints, security, Microsoft 365, and documentation in one console.
INCLUDED IN THE ONE PRICE
$6 per endpoint per month, every module included
One price covers every Command module, including Sentry EDR and Web Protection. Unlimited technicians, month-to-month, and a free 30-day pilot on up to 50 endpoints.
FAQ
IT documentation and vault: common questions
Is the password vault separate from documentation?
Yes. Credentials need their own permission, separate from documentation access, and are stored in their own encrypted table with a separate key for each client.
What is recorded when someone reveals a password?
Each reveal is recorded with who did it and for which client. One-time (TOTP) code views and share links are recorded the same way.
How do I share a credential with a client?
Send it through a one-time share link instead of email or chat.
Is IT documentation included in the price?
Yes. It is part of the one Command price of $6 per endpoint per month, with every other module, unlimited technicians, and no long-term contract.
See it in a walkthrough, or try it on your own endpoints
Book a demo for a guided tour, or apply for the beta to run Command free for 30 days with guided onboarding.