
SecureWipe: ANSSI and NIST-compliant secure disk erasure, because rm -rf isn't enough
In a medical environment subject to HDS (French healthcare data hosting regulations) and NIS2, decommissioning a hard drive is not a trivial operation. A rm -rf or even a quick format doesn't destroy data — it just dereferences the files. The data remains physically present and recoverable. I built SecureWipe to have an auditable erasure tool, compliant with recognized standards, and usable without friction in a real operational context. Why not just use shred , wipe , or DBAN? These tools exist and work. But they come with real problems in a professional context: No native traceability : no usable erasure report for an audit or a documented decommissioning procedure Vague compliance : shred does random passes, but doesn't align with any specific standard (ANSSI, NIST) DBAN has been end-of-life since 2015 , replaced by Blancco which is commercial No integration into existing Python workflows SecureWipe addresses these gaps: written in Python, it documents every operation and implements
Continue reading on Dev.to Python
Opens in a new tab




