SecureWipe Workbench

A Windows/.NET disk sanitization workbench for HDD, SATA SSD and SAS/SCSI SSD overwrite workflows, verification evidence and technician-friendly reporting.

This is a public, rebranded and sanitized version of an independent project built to explore safe disk wipe workflows, drive health evidence collection and repeatable certificate/report generation.

Destructive software warning: this tool is designed to erase disks. Use only on systems and drives you own or are explicitly authorized to process.

What it does

SecureWipe Workbench provides a Windows Forms interface for selecting in-scope disks, running overwrite-based sanitization workflows and producing evidence reports.

Core capabilities include:

• Windows disk inventory
• OS disk protection checks
• NVMe out-of-scope blocking
• HDD / SATA SSD / SAS/SCSI SSD workflow focus
• Single disk wipe workflow
• Parallel batch wipe workflow
• Configurable overwrite method
• Capped sampled verification and full-read verification options
• SMART evidence collection when smartctl is available
• TXT, HTML, JSON and CSV evidence outputs
• Technician/job metadata fields
• Readiness and storage validation helper screens

Safety model

The project includes multiple safety layers:

• Administrator requirement
• OS disk blocking
• NVMe blocking for this build
• Confirmation dialogs before destructive workflows
• Cancellation treated as not sanitized
• Failed verification treated as not sanitized
• Firmware purge/sanitize commands disabled in this public build
• HPA/DCO shown as not assessed from Windows path instead of overclaiming hidden-area validation

See docs/safety-model.md for details.

Scope

In scope:

• HDD
• SATA SSD
• SAS/SCSI SSD
• Windows overwrite-based Clear workflow
• Verification and reporting

Out of scope:

• NVMe sanitize / format NVM
• ATA Secure Erase execution
• SAS/SCSI firmware sanitize execution
• Claims of third-party certification
• Use on unauthorized systems

Technology stack

• C#
• .NET 8
• Windows Forms
• Windows storage APIs / PowerShell-backed inventory
• Raw PhysicalDrive overwrite workflow
• JSON / HTML / TXT / CSV report generation
• Optional smartctl integration

Build

Install the .NET 8 SDK on Windows, then run:

cd src/SecureWipe.Workbench
dotnet restore
dotnet build -c Release

To publish a self-contained Windows x64 build:

dotnet publish -c Release -r win-x64 --self-contained true

Repository layout

src/SecureWipe.Workbench/       Application source code
docs/                           Safety, SOP and portfolio documentation
examples/                       Redacted sample evidence files

Important disclaimer

This project is provided for educational and authorized operational use only. It references NIST SP 800-88 concepts as guidance but does not claim NIST certification or third-party validation.

Always physically verify the target disk before erasing. A successful UI action does not replace operational responsibility.

Public release notes

This public version was sanitized before publishing:

• Removed compiled binaries, PDB files and build outputs
• Removed company branding assets
• Rebranded from internal naming to SecureWipe Workbench
• Removed organization-specific wording
• Changed hidden-area wording to avoid unsupported HPA/DCO claims
• Clarified capped sampled verification naming
• Set manifest to request Administrator execution