Hard Drive Eraser Software — Secure Disk Wipe Tool

D-Secure Drive Eraser costs $25 per license, or $30 per license for the Drive Eraser + Diagnostics edition. It is a pay-per-use purchase: each license covers one drive erasure. Volume discounts start at 5 licenses (30% off) and rise to 80% off for 1,000+ licenses. See the pricing page for the full table.

Yes. The Drive Eraser ISO boots on x64 (Intel and AMD) PCs, laptops and servers with UEFI firmware, including systems that have Secure Boot turned on, so you do not need to disable Secure Boot before erasing. Write the ISO to a USB drive, boot the target machine from it, and erase every connected drive at once.

To securely wipe a hard drive before selling a computer, laptop, or external storage device, standard formatting is insufficient because data recovery tools can easily retrieve personal files, passwords, and sensitive financial data. You must use data sanitization software, such as D-Secure Drive Eraser, that applies NIST SP 800-88 Clear or Purge methods suited to the drive type (firmware sanitize commands for SSD and NVMe), and keep its report as evidence. D-Secure Drive Eraser boots from a USB drive or over PXE network boot, sanitizes the drive with NIST SP 800-88 Clear or Purge methods, and produces a digitally signed erasure report you can keep as documented evidence before the hardware changes hands.

D-Secure Drive Eraser permanently sanitizes a hard disk drive (HDD) by writing new data patterns across every addressable sector on the disk, overwriting the original content to protect against simple, non-invasive data recovery. Unlike standard deletion or formatting, which only removes the file system's reference to stored data while leaving the underlying content physically intact, Drive Eraser applies NIST SP 800-88 Clear overwriting methods. Once the overwrite passes complete, the software performs a verification pass to confirm that all sectors have been correctly processed. The entire operation is documented in a tamper-evident, digitally signed certificate in PDF format, providing supporting evidence for your own audit documentation under GDPR, HIPAA, PCI DSS and India's DPDP Act; compliance remains your organisation's responsibility. Drive Eraser erases 100+ drives simultaneously on a single machine (no software limit; capacity depends on your hardware).

Yes. D-Secure Drive Eraser is designed to securely sanitize solid-state drives (SSDs) as well as traditional hard disk drives. Erasing an SSD is fundamentally different from erasing an HDD, and this distinction matters for compliance. HDDs store data on magnetic platters, where overwriting every sector with new data is straightforward. SSDs use NAND flash memory managed by an internal controller that employs wear-levelling and over-provisioning — techniques that distribute writes across memory cells to extend drive life. As a result, a simple multi-pass overwrite may not reach every physical memory location, meaning data could survive in over-provisioned or remapped areas. NIST SP 800-88 accounts for this by defining a Purge category specifically for SSDs, which uses ATA Secure Erase or NVMe Format commands issued directly to the drive's firmware. D-Secure Drive Eraser supports these Purge-level methods alongside standard Clear-category overwrites, allowing the appropriate technique to be matched to the media type. Each operation generates a digitally signed audit certificate confirming the method applied and the verification result.

Yes. D-Secure Drive Eraser supports NVMe (Non-Volatile Memory Express) drives alongside HDDs and SSDs, covering the full range of storage media found in modern enterprise workstations, laptops, and servers. NVMe drives connect directly to the CPU via the PCIe bus rather than through a SATA controller, delivering significantly faster read and write speeds than SATA SSDs — but this architecture also introduces specific data sanitization considerations. Like SATA-based SSDs, NVMe drives use NAND flash memory with wear-levelling and over-provisioning, making simple sector overwrites insufficient on their own. NIST SP 800-88 Rev. 1 addresses this through the NVMe Format command, which instructs the drive's controller to sanitize all user-addressable storage locations, including over-provisioned areas. D-Secure Drive Eraser supports the relevant NIST 800-88 Purge-category methods for NVMe media. After sanitization, the software generates a tamper-evident, digitally signed certificate in PDF format, recording the standard applied, the drive identifier, and the verification result. NVMe controller commands adhere to NVMe-CLI specification standards.

D-Secure Drive Eraser sanitizes drives using the NIST SP 800-88 Clear and Purge methods. NIST does not certify or approve erasure products; D-Secure's methods follow NIST SP 800-88 guidance. DoD 5220.22-M is a legacy overwrite specification, and NIST states multi-pass overwriting is not needed. The method applied to each drive is recorded in the digitally signed PDF and JSON report generated at the end of every erasure session. For specifications, see the Drive Eraser product page or contact D-Secure directly.

D-Secure Drive Eraser is designed to support compliance with a range of data protection regulations and industry frameworks that mandate secure, documented data destruction as part of proper data lifecycle management. These include: GDPR Article 17 (Right to Erasure / Right to Be Forgotten), which requires organisations to permanently delete personal data under specific conditions and document that deletion; HIPAA (Health Insurance Portability and Accountability Act), which governs the secure disposal of Protected Health Information (PHI) on retired medical and administrative devices; PCI DSS 4.0, which requires that cardholder data be rendered unrecoverable on decommissioned systems; India's Digital Personal Data Protection (DPDP) Act 2023, which imposes data erasure obligations aligned with those of GDPR; and SOX (Sarbanes-Oxley), relevant to financial records disposal. In each case, Drive Eraser's digitally signed, per-device PDF and JSON reports can support your own documentation. Compliance remains your organisation's responsibility. For a detailed mapping of how the erasure workflow aligns with each framework, visit the D-Secure compliance page.

NIST Special Publication 800-88 Rev. 1 — "Guidelines for Media Sanitization" — is published by the US National Institute of Standards and Technology and defines three sanitization categories based on the sensitivity of the data stored and the type of storage media: Clear (overwriting-based methods suitable for lower-sensitivity data and magnetic media), Purge (firmware-level commands for flash storage such as SSDs and NVMe drives, providing a higher assurance level), and Destroy (physical destruction, outside the scope of software tools). NIST 800-88 is widely referenced by US federal agencies, defence contractors, healthcare organisations, and enterprise IT teams as the authoritative framework for media sanitization decisions. One important clarification: NIST 800-88 is a set of guidelines, not a certification programme — NIST does not formally certify individual products in the way that ISO or SOC 2 auditors do. D-Secure Drive Eraser implements the technical methods prescribed under both the Clear and Purge categories of NIST 800-88 Rev. 1, and applies them appropriately based on the media type being sanitized. Use the free NIST 800-88 Checker tool on the D-Secure website to determine which category applies to your specific media.

After every completed erasure session, D-Secure Drive Eraser automatically generates a tamper-evident audit certificate available in both PDF and JSON formats. Each certificate is digitally signed with SHA-256 and a 2048-bit key, which protects the integrity of the document and allows recipients to verify that it has not been altered after issuance. The certificate records the key details of the erasure event, including the device identifier, storage media type, the erasure standard applied, date and time of operation, number of passes completed, and the verification result confirming that the process was successful. JSON output allows the certificate data to be imported directly into asset management systems, ERPs, or ServiceNow workflows for centralised, automated record-keeping at scale. These certificates can support your documentation under GDPR Article 17, HIPAA, PCI DSS 4.0, and India's DPDP Act 2023. Whether a certificate constitutes sufficient legal evidence in a specific regulatory proceeding depends on the jurisdiction and the applicable regulatory authority; please consult your legal and compliance team or contact D-Secure for guidance relevant to your situation.

D-Secure Drive Eraser is deployed from a bootable USB or over PXE network boot. USB Boot: The software is loaded onto a bootable USB drive. A technician inserts the USB into the target device, boots from it, and runs the erasure session independently of the installed operating system. This is well-suited to one-off device retirement, repair-shop workflows, and situations where network connectivity is unavailable. PXE Network Boot: PXE (Preboot Execution Environment) network boot is also available. Drive Eraser boots from a bootable USB. Erasure results and certificates from USB-booted sessions are stored as digitally signed PDF and JSON reports. Remote Windows wiping via MSI deployment through SCCM or Intune is on our roadmap. This feature is in development and not part of the current release. Timelines are subject to change.

Yes. D-Secure Drive Eraser is licensed and managed online. It boots from a USB drive or over PXE, independent of the operating system installed on the device being erased, and it needs an internet connection to validate the license and to upload the digitally signed PDF report to the D-Secure cloud console. Connect the erasure station through Wi-Fi or Ethernet and allow outbound HTTPS to the D-Secure domains. Once the report is in the cloud console, your team can search it, download it and keep it with your asset records for audits.

Erasure failures and interruptions — caused by power loss, hardware errors, drive firmware issues, or bad sectors — are a real operational concern in high-volume environments, and how a tool handles them is a critical evaluation criterion. D-Secure Drive Eraser flags failed and incomplete erasure events in the on-device session interface, allowing operators to identify which devices require attention. Devices where erasure did not complete successfully do not receive a passing audit certificate, ensuring that your compliance documentation only reflects verified, completed operations. For a specific drive that fails erasure — for example, due to bad sectors blocking a complete overwrite — the appropriate remediation is typically physical destruction, which NIST 800-88 classifies under the Destroy category. Error handling includes automated sector retry algorithms, detailed pass/fail audit logs, and hardware defect reporting.

D-Secure Drive Eraser has no software limit on parallel erasure: it wipes every connected drive in a single session, and 100+ drives at once on one machine is possible with the right hardware (SAS/HBA controllers, drive bays and PCIe bandwidth). This capability is particularly valuable in high-throughput environments where processing speed directly affects operational efficiency — including data centre decommissioning projects, ITAD facilities processing returned IT assets, and enterprise IT teams managing large-scale device refresh cycles. Each machine boots from USB or over PXE network boot and erases all of its connected drives at once. Each drive receives its own digitally signed PDF and JSON report on completion. You can run it on as many machines as you need, booting from USB or PXE network boot, because licensing is per drive, not per machine. Hardware-accelerated multi-threading ensures maximum drive bus utilization.

In an enterprise IT environment, data erasure is not a standalone task — it is a critical step in the full IT asset lifecycle, connecting device procurement, active use, redeployment, resale, and end-of-life retirement. D-Secure Drive Eraser is built to integrate into this broader lifecycle rather than operate as an isolated utility. Every erasure produces a signed PDF and JSON report, collected in the report repository of the admin console, giving asset management and ITSM teams one place to find the evidence for each retired device. The JSON reports can be imported into existing ticketing, asset tracking and ERP systems. Where an organisation needs this to happen automatically, for example linking erasure events to the asset's ServiceNow record, API integration is available on request: D-Secure builds a custom API for that integration. For enterprise procurement, volume licensing tiers are available for 10, 50, 100, 500, and 1,000+ licences, with custom MSP and OEM pricing available on request.

D-Secure Drive Eraser operates on a pay-per-use licence model, where each licence corresponds to one complete erasure operation on one device. A key feature of this model, as stated by D-Secure, is that licences do not expire — purchased licences remain valid for future use and are not subject to annual renewal or subscription deadlines. This is particularly well-suited to organisations whose erasure volumes fluctuate across quarters or project cycles, such as ITAD facilities that handle variable inflows of returned assets, or enterprise IT teams that manage periodic device refresh programmes rather than continuous daily processing. Licences are available in volume tiers: 1, 10, 50, 100, 500, and 1,000+ licences, with pricing starting at $25.00 per licence for the Standard Erasure variant and $30.00 per licence for the Drive Eraser + Diagnostics variant. Custom pricing is available for MSPs, OEM partners, and high-volume enterprise accounts. It is important to note that It is important to note that D-Secure File Eraser — the separate file-level product — uses a different pricing model (annual subscription starting at $40.00/year). For volume quotes, MSP pricing, or multi-year arrangements, contact the D-Secure sales team.

IT Asset Disposition (ITAD) operators have distinct requirements that differ from standard enterprise IT: high throughput, multi-client audit trails, resale-readiness documentation, regulatory compliance across multiple client frameworks simultaneously, and the ability to process devices efficiently without a consistent network infrastructure on the floor. D-Secure Drive Eraser addresses these needs through several capabilities. Bulk processing: Parallel erasure of 100+ drives per machine (no software limit), combined with PXE network boot for multi-machine parallel sessions, supports high-volume daily throughput. Per-device certificates: Each device receives its own tamper-evident PDF audit certificate, digitally signed and recording the standard applied, the device identifier, and the verified outcome — giving the ITAD operator documentation to pass to clients as supporting evidence of the erasure. Sanitization methods: Drive Eraser applies the NIST SP 800-88 Clear and Purge methods to handle client sanitization requirements. Partner programme: D-Secure's ITAD Partner programme (see the Partners page) offers additional commercial terms including volume pricing and dedicated support. The OEM partner program supports white-label certificate branding and custom reporting.

Yes. D-Secure Drive Eraser is designed to handle server-class hardware and RAID arrays in addition to individual PCs and laptops. This is an important distinction for enterprise and ITAD buyers, since decommissioning server infrastructure involves different hardware configurations — multiple drives in RAID enclosures, hot-swap bays, and server chassis that may not support standard desktop boot media in the same way as workstations. Drive Eraser can erase 100+ drives at once on a single machine (no software limit; capacity depends on your hardware), which is directly applicable to multi-drive server configurations. PXE network boot deployment will enable server erasure to be initiated remotely over a network, without requiring a technician to manually attach a USB boot drive to each server in a rack — a significant operational efficiency in data centre decommissioning projects. RAID array erasure is supported, allowing the storage system to be sanitized as a unit where the configuration permits. Universal storage drivers ensure broad controller and chassis compatibility.

DoD disk wipe software refers to data erasure tools that follow the US Department of Defense standard 5220.22-M for secure hard drive wiping. The DoD 5220.22-M method performs a minimum 3-pass overwrite on every addressable sector of a storage device: Pass 1 writes zeros, Pass 2 writes ones, and Pass 3 writes a random pattern — followed by a verification read. The 7-pass variant adds additional random-pattern passes for even higher assurance. D-Secure Drive Eraser sanitizes drives using NIST SP 800-88 Clear and Purge methods; DoD 5220.22-M is not one of its methods. DoD removed overwrite requirements from the NISPOM in 2006, and NIST states multi-pass overwriting is not needed. Each erasure generates a digitally signed PDF and JSON report documenting the method applied, drive serial number, and verification result.

Bootable hard drive wipe software operates independently of the installed operating system by running from a dedicated USB drive or PXE network boot environment. When a computer boots from the erasure media instead of its internal drive, the software gains direct, low-level access to every sector on the target storage device — including system partitions, hidden recovery partitions, and sectors locked by the OS during normal operation. This bypass is critical because wiping software running within Windows, macOS, or Linux cannot access sectors that the OS itself is using, leaving potential data remnants. D-Secure Drive Eraser creates a bootable Linux-based environment that works with HDDs, SSDs, and NVMe drives across PCs, laptops, and servers. It supports USB boot for individual devices and PXE network boot for large-scale deployments where IT teams need to wipe hundreds of devices without physically touching each one.

Professional data erasure software uses internationally recognised standards that define how storage media should be overwritten to prevent data recovery. The most widely referenced standards include: NIST SP 800-88 Rev. 1 — published by the US National Institute of Standards and Technology, defining Clear (overwrite-based) and Purge (firmware-level) sanitization categories; DoD 5220.22-M — the US Department of Defense standard requiring 3-pass or 7-pass overwriting; IEEE 2883-2022 — the current IEEE standard for sanitization of storage devices; HMG IS5 — the UK government standard with Baseline (1-pass) and Enhanced (3-pass) variants; and Gutmann — a 35-pass method designed for legacy magnetic media. D-Secure Drive Eraser applies the NIST SP 800-88 Clear and Purge methods from this list, allowing organisations to select the appropriate method based on data sensitivity and storage media type.

NIST 800-88 data erasure software is any tool that implements the sanitization methods defined in NIST Special Publication 800-88 Rev. 1 — 'Guidelines for Media Sanitization.' This standard defines two software-applicable categories: Clear (logical overwriting of all user-addressable storage, suitable for lower-sensitivity data on HDDs) and Purge (firmware-level sanitization using ATA Secure Erase or NVMe Format commands, recommended for SSDs and NVMe). NIST 800-88 is referenced by US federal agencies, defence contractors, healthcare organisations under HIPAA, and enterprises pursuing SOC 2 and ISO 27001 certifications. D-Secure Drive Eraser implements both Clear and Purge methods per NIST 800-88 Rev. 1, automatically selecting the appropriate technique based on whether the target is an HDD or SSD/NVMe drive. Each erasure generates a digitally signed certificate documenting the NIST method applied and verification result.

To completely wipe a hard drive without an operating system, create a bootable USB drive using D-Secure Drive Eraser. Insert the bootable media into the computer, restart and boot from USB via BIOS/UEFI. D-Secure boots into a self-contained environment that bypasses the installed OS, granting low-level access to securely sanitize system partitions, MBR, and GPT tables according to NIST 800-88 standards and generating a tamper-evident audit certificate.

To safely wipe an SSD before selling or returning a laptop without degrading drive health, traditional multi-pass overwrites should not be used due to NAND flash wear-levelling. Instead, use D-Secure Drive Eraser to execute NIST SP 800-88 Purge, NVMe Sanitize, or ATA Secure Erase firmware commands. Purge is designed to make recovery infeasible with state-of-the-art laboratory techniques, and the digitally signed report records the method used and the result.

D-Secure Drive Eraser is built for businesses that need to erase hard drives, SSDs and NVMe drives with proof. It boots from USB on any x64 (Intel or AMD) PC, laptop or server, including UEFI and Secure Boot systems, so it works whatever operating system is installed. It applies NIST SP 800-88 Clear and Purge methods, erases 100+ drives at once on one machine (no software limit; capacity depends on your hardware), and creates a digitally signed PDF and JSON erasure report for every drive.

Yes, formatting a hard drive (Quick or Full format) only resets the file system directory tables while leaving actual data blocks intact on the disk platters, allowing data recovery software to restore files. D-Secure Drive Eraser applies NIST SP 800-88 Clear (overwrite) or Purge (firmware sanitize) methods to the drive, followed by a verification pass, to protect against recovery.

D-Secure Drive Eraser automatically generates a digitally signed, tamper-evident certificate of erasure in PDF and JSON formats upon every completed erasure. Each certificate records the drive model, serial number, the NIST SP 800-88 method applied (Clear or Purge), the verification result and a timestamp, giving an organisation evidence to use in its own accountability and audit documentation.

NIST SP 800-88 Rev. 1 is widely considered the superior modern standard over DoD 5220.22-M. While DoD 5220.22-M mandates 3 to 7 overwrite passes designed for legacy magnetic HDDs, NIST 800-88 recognizes modern high-density drives and solid-state flash media, providing Clear (single-pass overwrite) and Purge (firmware-level cryptographic/block erase for SSDs/NVMe) without causing unnecessary wear on modern drives. D-Secure Drive Eraser applies the NIST SP 800-88 Clear and Purge methods.