Operator and buyer manual · Version 1.7 · September 2026

Runner

Secure, serverless messaging, file sharing and tasking for field and emergency operations

This manual explains how to install, operate and configure Runner, and describes the security properties that matter when selecting it. It covers build 1.7 on Windows 10 and 11.

Operators — chapters 2 to 9 and the quick reference Buyers, IT and security officers — chapters 1 and 10
AES-256-GCM RSA-2048 ECDH P-256 TPM NO SERVER NO INTERNET

1 Introduction

1.1 What Runner is

Runner is a secure messaging application for teams that work without internet, without servers and often over slow radio links: military units, emergency services, crisis teams and exercise staff. Every computer running Runner is a complete station. Stations find each other on the local network by themselves and talk directly to one another. There is no central server to install, maintain or lose.

Runner combines text chat, file transfer, shared files, tasks and map positions in one window, and protects all of it with end-to-end encryption and digital signatures.

1.2 Who this manual is for

  • Operators use chapters 2 to 9: installing, the main window, messaging, files, tasks, the map and settings.
  • Buyers, IT and security officers will find the technical and security properties in chapter 10, and the requirements below.

1.3 Key features

  • Chat with everyone, with groups or with a single station; reactions, replies, pinning, mentions.
  • Direct file transfer and network-wide file sharing in which every station helps to deliver (swarm).
  • Tasks with priority, deadline and typed items; every recipient answers individually.
  • Map with GPS, MGRS or latitude/longitude, and live positions of other stations.
  • Works on a gigabit switch and on a narrow-band radio link; the bandwidth Runner uses can be limited.
  • End-to-end encryption (AES-256-GCM), signatures (RSA-2048), forward secrecy, an encrypted database, a lock screen and an emergency wipe.

1.4 System requirements

Item Requirement
Operating system Windows 10 or Windows 11
Network Any IP network: LAN, Wi-Fi or IP-capable radio. No internet needed.
Ports 51500 UDP (discovery) and 51501–51510 TCP (data), opened by the installer
Licence A Runner licence file for each computer
Optional TPM chip (strongest protection of stored data); GPS receiver on a COM port

2 Installation and licensing

2.1 Installing

Run RunnerSetup as an administrator and follow the steps. The installer places Runner in Program Files, creates the shortcuts (including one to this manual in the Start menu) and opens the two firewall ports. A minute after every start, Runner checks the firewall itself and reports any blocked port in the log, with what to do about it.

Runner keeps its data in the user’s application-data folder (%APPDATA%\Runner). Nothing is stored anywhere else and nothing leaves the local network.

2.2 Activating the licence

Drag the licence file onto the Runner main window. Runner checks it, keeps a copy and activates at once; no internet connection is needed. A licence covers the whole computer, not a single Windows user. Help > Licence shows the current licence and lets you switch to another one. The status bar shows the licensee, and the log shows how many stations the licence covers.

2.3 First start

  1. Enter your display name at the top left. This is the name other stations see.
  2. Choose an icon (vehicle, woods, building and so on) and your status (online, away, busy, offline).
  3. Other stations on the same network appear in the Clients list within a few seconds.
  4. If your organisation uses a network passphrase, enter it under Edit > Settings > Security first. Without the right passphrase you will not see the other stations.

3 The main window

The Runner main window (green style)
Area Purpose
Menu bar File, Edit, View, Send and Help. Help > Help (F1) opens this manual.
Name, icon and status How other stations see you.
Clients / Groups Every station that is online, with its IP address and response time (ping) in milliseconds; your groups on the second tab. The Maps button opens the map.
Chat tabs Everyone is always there. Every conversation with a station or group gets its own tab; close it with the cross.
Chat buttons Split shows two chats side by side, − / + change the text size, Pinned shows the pinned messages.
Message box Type your message (up to 2,000 characters). Send, Send file… and Tasks are to the right.
Log Everything Runner does, with the time. Double-click it to open it in a larger window.
Status bar Connection, stations online, ping, open tasks, transfer speed, build and licence.

3.1 Activity indicators

Activity indicators

The small indicators above the message box light up while Runner is working:

Indicator Lights up when
SWARM Pieces of a shared file are travelling to or from other stations
CHUNKING A file is being cut into pieces for sharing
GPS A GPS receiver is connected; it flashes on a new position
ZLIB Data is being compressed or decompressed
AES-256 Data is being encrypted or decrypted
CRC-32 A transfer is being checked for damage
TX / RX Data is being sent / received

3.2 Status bar

Status bar

From left to right: the data port and network adapter, the number of stations online and groups, the best response time, the number of open tasks, the swarm speed while shared files are moving, and the build number and licensee.

4 Messaging

4.1 Everyone, groups and single stations

  • Everyone: type in the Everyone tab to reach every station that is online.
  • One station: click a name in the Clients list to open a private conversation.
  • Groups: on the Groups tab, click New group and add members. A station that is added has to accept. The buttons there (or a right-click on a group) show the members, and let you leave, rename or delete a group.

Every message shows a checkmark once it has been delivered. A message that arrives noticeably late (for example over a slow radio link) is placed at the moment it was sent and marked with a small clock; hover over it to see when it was sent and received. The threshold is set under Settings > Late messages.

4.2 Working with messages

Right-click a message to reply, copy, pin, react (Roger, Wilco, Negative, Solid Copy, Thanks), or edit or delete your own message. Mention someone with @name. Changes and deletions are applied on every station that has the message.

When a station drops off and returns, Runner offers it the messages it missed. After a short absence this happens automatically; after a longer one Runner asks first (Settings > General).

4.3 Quick commands

Type / in the message box to see all commands.

Command Action
/s Split the screen, or switch between the two chats when split
/amber, /green, /red Change the colour style
/location Send your current position to this chat
/showmap Open the map
/log Show or hide the log
/export Export this chat to a Word document straight away
/timesync Check this station’s clock against the admin station
/lock Lock Runner (when the lock screen is switched on)
/empty Empty this chat
/close Close this tab (not the Everyone tab)
/wipe Emergency wipe (asks for confirmation first)
/exit Close Runner

4.4 Finding and exporting

Edit > Find Messages (Ctrl+F) searches the whole history by text, sender, conversation, date, files only or pinned only. File > Export to Word saves a conversation as a document. Note: an export is not encrypted; Runner says so after exporting.

5 Files

5.1 Sending a file directly

Click Send file… in a conversation and choose the file. A progress bar shows the bytes sent, and either side can cancel. Files that are already compressed (ZIP, JPG, PDF, video) are sent as they are; everything else is compressed first. The receiver finds the file in the received files folder (View > Open received files, F9).

5.2 Sharing a file on the network

Send > Share on the network offers a file to everyone, to groups or to chosen stations, up to 64 MB by default. Other stations see it under Send > Shared on the network, where they can download, stop, open, withdraw or remove it; a double-click opens or downloads a file.

Downloads use swarming: every station that already has the file, or part of it, helps to deliver it, including stations that joined later. This spreads the load and speeds up delivery on slow links. Interrupted downloads resume by themselves, and a dialog appears when a download is complete (F10 opens the folder). The status bar shows the download and upload speed and how many stations take part.

Only the station that offered a file can withdraw it; it then disappears from all stations. Received and downloaded files are ordinary files on the computer: once copied elsewhere, they are outside Runner’s protection.

6 Tasks

6.1 Creating a task

Send > New task (or the Tasks button, then New task) opens the task form:

  • Title, priority (Routine, Priority, Immediate, Flash), an optional deadline and a description.
  • Extra items, each of a chosen type: text, number, choice list, yes/no, date and time, or location, picked on the map or taken from your own GPS position.
  • To: everyone, or any combination of groups and single stations. Every station answers for itself.

Templates store the contents of a task for re-use (Save as template). Save draft keeps an unfinished task under Tasks > Drafts to finish and send later.

6.2 Receiving and answering a task

A task that arrives pops up at once in front of all other windows, with a sound and, when Runner is in the background, a Windows notification. Answer with one of the buttons: Received, Understood, Busy, Ready, Done or Cannot execute, optionally with a note. You can change your answer later as the work progresses. Double-click a location item to see it on the map.

6.3 The Tasks window

Send > Tasks, or the Tasks button next to the message box, lists tasks on three tabs:

  • Received: your tasks and your own answer to each; the tab shows how many are still open.
  • Sent: your tasks and every recipient’s latest answer, for example 2 Done, 1 Busy, 1 not delivered.
  • Drafts: tasks you saved but have not sent.

A sent task cannot be changed; it can only be withdrawn. Use Copy to new to send a corrected version. Tasks wait for stations that are offline and are delivered as soon as they return.

7 Map and position

The Maps button (F6) opens the map. Runner reads MBTiles and GeoTIFF map files, so maps can be prepared in advance and used offline.

Connect a GPS receiver through the map window to show your position, satellite fix and speed. Coordinates are shown in MGRS or in latitude/longitude, converted in real time. When you share your position, other stations see you on their map with the distance between you; /location sends your position into a chat, where it can be clicked to open the map.

Edit > I’m next to… marks that you are physically with another operator: your names get the same colour on every station.

8 Network set-up

Runner normally needs no configuration. On most networks stations find each other through broadcasts. Where a radio link does not carry broadcasts, add the other stations’ addresses under Edit > Remote Stations, or let Runner sweep a range of addresses.

Situation Where
Computer with several network cards Edit > Bind app to NIC chooses the one Runner uses
Slow radio link Settings > Network: choose slow radio link, enter the speed and the share Runner may use. Measure and set measures the link to another station and fills in the values itself.
Announcement interval Settings > Discovery: fewer announcements mean less radio traffic and a smaller radio signature
Closed group of stations Settings > Security: set the same network passphrase on every station
Clocks View > Time Sync (F7): the admin station can align the clocks of all stations
Several operators on one computer On a terminal server, every operator can run Runner in their own Remote Desktop session under their own Windows account. Each is a separate station with its own name, identity and data; they share the computer’s IP address and need no configuration. Stations on the same computer show (same computer) in the Clients list, and Runner asks once whether the operators are physically next to each other. The status bar shows RDP primary on the Runner that receives for the others and RDP secondary on the rest; if the primary closes, a secondary takes over.

9 Settings reference

Edit > Settings (F5) holds all preferences. They apply to this station only.

Tab Contents
General Transfer sizes, received-files folder, text size, resending missed messages
Network Fast network or slow radio link, speed limit, Measure and set
Discovery Seconds between announcements, with the resulting network load
Late messages From how many seconds of delay a message is marked as late
Files Largest file you may share, how long downloaded files are passed on
Time Expected time zone; Runner warns (log and notification) when the computer differs
GDPR How many days messages, files, log entries and tasks are kept; database protection
Security Network passphrase
Lock screen Lock method, idle time, lock when minimised, PIN

The colour style is chosen under View > Color (black and white, amber, green, red or your own).

10 Security and privacy

Runner is designed for use in closed, sensitive environments. It uses only standard, published algorithms, provided by Windows itself (CNG).

Area Protection
Messages, files, tasks End-to-end encrypted with AES-256-GCM; any change on the way is detected and refused
Authenticity Every command is signed (RSA-2048, SHA-256) and addressed to one station; nothing unsigned is accepted
Replay Every message carries a time and a one-time code: recorded traffic cannot be played back
Forward secrecy Temporary keys (ECDH P-256) live only in memory and are replaced every hour; recorded traffic stays unreadable even if a computer is captured later
Network admission With a network passphrase, announcements are encrypted and only stations with the same passphrase can see and join the network
Impersonation Each station has its own identity key; a known station that suddenly shows another key is flagged in red
Data at rest The database, including the log and tasks, is encrypted with AES-256; the key is sealed by the computer’s TPM chip and tied to the Windows account
Lock screen Optional: locks after idle time or by hand (Ctrl+L), and also at start-up; unlock with a PIN, the Windows password or Windows Hello
Emergency wipe File > Emergency wipe (Ctrl+Shift+Del) or /wipe: after a red confirmation the keys are destroyed first, then all data and settings
GDPR Retention periods, real deletion (the database is compacted), and a privacy description for a DPIA in Help > Technical information

Recommended environment: BitLocker full-disk encryption, Windows’ own screen lock, and encrypted radios. Together with Runner’s own protection this gives two independent layers of encryption on the link and protection of a computer that is switched off. Help > Technical information (F2) contains the complete technical description.

11 Quick reference

Key Action
F1 This manual (Help > Help)
F2 Technical information
F5 Settings
F6 Map
F7 Time Sync
F8 Show or hide the log
F9 Open the received-files folder
F10 Open the shared-files folder
Ctrl+F Find messages
Ctrl+L Lock Runner
Ctrl+Shift+Del Emergency wipe

If a station does not appear: check that both stations use the same network passphrase (or none), that the firewall ports are open (see the log), and, on radio links, add the station’s address under Edit > Remote Stations.

If messages arrive late: on slow links, lower the announcement rate (Settings > Discovery) and set the radio speed (Settings > Network), so chat is not held up by file transfers.

Runner 1.7 (build 34). Menu names, shortcuts and defaults in this manual match that build. The complete technical description is in the application under Help > Technical information (F2); this manual opens with Help > Help (F1).