Air-Gapped & Secure Screen Sharing for Confidential & Enterprise Networks
Why air-gapped networks and high-compliance teams use ScreenTask: zero cloud relays, verifiable open-source code, and local password authentication.
In regulated sectors—including defense contracting, clinical research (HIPAA), financial auditing, legal practice, and government installations—internal networks are intentionally air-gapped or isolated from the public internet. On these networks, standard consumer screen sharing platforms like Zoom, TeamViewer, AnyDesk, Slack, or Google Meet are strictly prohibited or technically incapable of operating.
Cloud-based collaboration tools require connections to third-party relay servers, creating potential entry points for man-in-the-middle (MITM) surveillance, data exfiltration, or compliance penalties.
ScreenTask solves this challenge by operating as a self-contained, 100% on-premises screen sharing engine. ScreenTask does not connect to external servers, does not send telemetry, and confines all network packets exclusively to your local physical LAN.
The Air-Gapped Security Profile of ScreenTask
| Security Vector | Commercial Cloud Platforms | ScreenTask Offline Architecture |
|---|---|---|
| Data Transit Route | Third-party cloud servers & CDNs | 100% Local Subnet Only (L2/L3 LAN) |
| Internet Dependency | Hard requirement (fails if offline) | Zero internet required (Works 100% offline) |
| Telemetry & Tracking | User analytics, crash dumps, account telemetry | Zero telemetry, zero pings, zero tracking |
| Account / Identity | Cloud authentication tokens (SSO/OAuth) | Optional local HTTP session password |
| Source Code Auditing | Proprietary black box (closed-source) | 100% Auditable on GitHub (GNU GPL v3) |
| External Dependencies | WebRTC STUN/TURN traversal servers | Zero STUN/TURN servers needed |
Verifying Network Isolation: Wireshark Packet Inspection
Security officers and compliance auditors can easily verify ScreenTask’s network footprint:
- Launch Wireshark or your organization’s network traffic monitor.
- Filter for all outbound traffic from the host machine to public WAN IP addresses:
ip.src == <HOST-PC-IP> and !(ip.dst in {10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16}) - Start broadcasting in ScreenTask.
- Observe that zero packets are directed outside your internal private network boundaries.
Step 1: Deploying the Standalone Portable Binary
Because high-security environments often lock down Windows installer privileges and prohibit registry modifications:
- Download the portable standalone release
ScreenTask.v1.2.zipfrom the ScreenTask Download Hub on an authorized ingestion workstation. - Perform internal virus, hash, and static code analysis against the binary.
- Copy
ScreenTask.exevia encrypted USB drive to the target air-gapped machine. - ScreenTask runs as a standalone single-file binary with no background service or system driver installations.
Step 2: Enforcing Session Password Authentication
In shared corporate offices or multi-department local networks, prevent uninvited colleagues on the same VLAN from observing confidential presentations:
- In ScreenTask, check the Password Protection checkbox.
- Enter an alphanumeric session password.
- When authorized viewers enter
http://<HOST-IP>:7070in their browsers, ScreenTask’s embedded HTTP server serves an authentication challenge. - Unauthorized requests are immediately rejected before any video frames are rendered.
Step 3: Isolating by Subnet and VLAN
For enterprise network administrators wishing to restrict ScreenTask viewing to specific meeting rooms:
- Place the meeting room devices on a dedicated presentation VLAN (e.g.,
10.200.5.0/24). - Configure router Access Control Lists (ACLs) to permit TCP port 7070 only within that specific VLAN subnet.
- Devices on other corporate subnets (e.g. executive or accounting VLANs) will be physically barred from reaching the ScreenTask HTTP endpoint.
Open-Source Transparency & Software Bill of Materials (SBOM)
ScreenTask is distributed under the GNU General Public License v3.0. Organizations with strict compliance requirements can inspect, audit, or recompile the C# source code directly from the official ScreenTask GitHub repository using standard Microsoft Visual Studio or .NET build tools.
Related Guides & Resources
Try ScreenTask Free & Offline
Experience seamless, low-latency screen sharing on your local Wi-Fi or Ethernet network with zero internet required.
