Why a Standard PLC Cannot Perform Safety Functions
Wiring both channels of a safety device (for example, a dual-channel E-stop) to two standard PLC inputs and driving two outputs does not create a safety function. A conventional PLC is not a certified safety component: its internal electronics are not redundant, so a single internal fault can leave an output energized when the logic demands a shutdown.
What Makes a Safety Relay Different
A safety relay contains redundant electronics and is certified as a safety component. The redundancy means that a single internal fault is detected or tolerated rather than producing a dangerous output state. This is what allows safety relays to be used in Category 1 and higher systems where a standard PLC is excluded regardless of how the wiring is arranged.
Safety PLCs and Certified Function Blocks
When a programmable solution is needed, only safety-rated PLCs qualify as safety components. Major manufacturers (for example, Siemens and Omron) offer CPUs with integrated safety, which must be paired with certified safety inputs and safety outputs. The entire chain—CPU, inputs, outputs—is redundant and certified. Programming is deliberately restricted: safety logic can only be built from a fixed set of function blocks that are themselves certified and validated as redundant logic for safety functions. General-purpose ladder logic is not permitted in the safety task.
Reaction Time Is Not the Deciding Factor
A common objection is that a PLC CPU reacts faster than a safety relay. Speed is irrelevant here: safety applications are not time-critical in the way a servo positioning loop is. The decisive metric is the probability of a dangerous failure—for example, the probability that the output fails to de-energize on demand. That probability is far higher in a standard PLC than in a safety relay, because the standard PLC lacks the redundant, self-monitoring hardware. A faster unsafe device is still unsafe.
| Property | Standard PLC | Safety Relay | Safety PLC |
|---|---|---|---|
| Redundant electronics | No | Yes | Yes |
| Certified safety component | No | Yes | Yes |
| Maximum usable category | Category B (low PLr only) | Category 1 and above | Category 1 and above |
| Programming | General-purpose logic | Fixed/hardwired function | Certified function blocks only |
| Dual-channel wiring makes it safe | No | N/A (designed for it) | N/A (designed for it) |
FAQ
Can I use a standard PLC for an E-stop if I wire both channels to two inputs?
No. Dual-channel wiring to standard inputs does not add internal redundancy or certification. A conventional PLC can only be considered where the PLr is achievable with a Category B architecture—very low-risk cases only.
What is the difference between a safety relay and a safety PLC?
Both are certified, redundant safety components usable from Category 1 upward. A safety PLC adds programmability, but only through certified and validated safety function blocks, and requires certified safety inputs and outputs.
Does PLC scan speed matter for safety functions?
No. The critical factor is the probability of a dangerous failure, such as an output failing to switch off on demand. A standard PLC's CPU is fast but has a much higher dangerous-failure probability than a safety relay because it lacks redundant electronics.