Industrial automation safety guide · Updated September 2026

Safety relay vs safety plc is the architecture choice between defined hardwired safety logic and certified programmable safety logic. Short answer: use a safety relay for a small, fixed safety function whose hardwired logic is easy to inspect and validate. Use a safety PLC when several devices or zones interact, logic changes with product modes, distributed safety I/O matters, or diagnostics and controlled expansion justify programmable safety logic. Neither category is automatically safer. The complete input, logic, output, feedback and validation path must meet the risk-reduction target for the machine.

Safety Relay vs Safety PLC: The Short Comparison

One safety relay applies a defined logic pattern inside a dedicated module. Certified safety PLCs execute a safety program across safety inputs and outputs. This table is a starting point for a design review, not a substitute for a risk assessment and functional-safety lifecycle review or a device data sheet. For an industrial buyer, a wrong boundary can create rework and delay; record the hazard, test evidence, machine application and exact certified model before release.

Decision factor	Safety relay	Safety PLC	What the buyer must verify
Logic model	Fixed or function-specific hardwired logic	Configurable certified safety program	Permitted logic blocks and assumptions
Typical scale	One or a few defined functions	Many interacting functions and zones	Actual device and zone count
Wiring	More point-to-point conductors as scope grows	Safety I/O and network architecture reduce field wiring	Terminal, network and segregation rules
Diagnostics	LEDs, contacts and feedback circuit	Program status, diagnostics and event detail	What a technician can see without guesswork
Change control	Physical rewiring and retest	Software revision, access control and revalidation	Who approves and records a change
Expansion	Additional modules and conductors	Additional certified I/O and reviewed logic	Spare capacity and lifecycle support
Commissioning	Often shorter for a simple fixed circuit	More engineering and software test work	Approved test protocol and competent staff
Troubleshooting	Visible wiring and module indicators	Richer diagnostics but more configuration to understand	Maintenance skill and backup tools
Independence	Can keep a simple safety function separate	Can integrate safety and standard control under governed boundaries	Independence and common-cause assumptions
Lifecycle cost	Lower entry cost may rise with wiring and variants	Higher entry engineering cost may reduce change effort	1-year build and 5-year ownership view
Hybrid option	Dedicated relay for a local fixed function	Safety PLC for coordinated functions	Clearly documented safety-function boundaries

Two common search questions have the same answer: a standard PLC isn’t a safety PLC, and a safety PLC doesn’t make every connected device safety-rated. Certification, diagnostics, fault response and validation belong to the complete safety-related control system.

Buyer questions covered here include safety relay vs safety plc decision, Safety relay vs safety plc pros and cons, Safety PLC vs normal PLC, and safety relay vs safety plc cost.

What a Safety Relay Actually Does

One safety relay monitors input channels and controls safety-rated outputs for a known function. Depending on the module, that may include an emergency stop, guard interlock, two-hand control or light-curtain signal. Dual-channel input evaluation, feedback or external-device monitoring, reset behavior and a de-energized safe state are design details to confirm in the selected manual. An unverified feedback path can create an unsafe-restart risk, so keep the wiring diagram, test record, machine use case, certified module data and HSE evidence together.

HSE functional-safety guidance frames the work as a whole-life-cycle concern rather than a component-only choice. UK Health and Safety Executive, Functional safety guidance

That boundary matters when a buyer sees a label such as “Category 4” or “SIL 3.” These labels may describe component capability under stated conditions, but Category/Performance Level and Safety Integrity Level are distinct schemes; neither label transfers to the complete machine. A label doesn’t calculate the achieved Performance Level or Safety Integrity Level of a machine with a sensor, relay, contactor, reset circuit and wiring fault. Treat 24 VDC, 2-channel and feedback terminals as specification inputs, not as a safety conclusion. Because a feedback fault creates risk, compare the result with ISO 13849-1 evidence for the complete machine application.

Common mistake: choosing a relay by contact count alone. List every safety input, final switching element, feedback path and reset condition before comparing models.

What a Safety PLC Adds to the Architecture

Certified safety PLCs add a programmable logic layer and safety I/O. They can coordinate several safety zones, operating modes and sequences while exposing diagnostic information to an authorized maintenance team. Practical value appears when a machine has interacting functions, distributed equipment or planned product changes. That flexibility addresses a real maintenance risk when a production application has remote cabinets, changing recipes and a documented test plan for each certified function.

Programmability creates governance work. Your team needs a controlled project file, version history, access permissions, backup, review, test cases and a revalidation trigger. Networked safety also needs a documented device list, address/configuration checks and a response-time calculation. Safety PLC design should simplify a verified architecture, not hide an undocumented one.

For integration questions around sensors and controllers, the site’s safety light curtain and PLC integration guide is a useful adjacent reference; it doesn’t replace the selected controller’s instructions.

The Nine Decision Factors That Matter More Than Brand

Score each factor from 1 (low) to 5 (high), then record the evidence beside the score. A wrong score can create delay and rework, so capture test evidence for the machine application and certified supplier or factory data. Use the ISO 13849-1 public overview as a system-level reference. This score is a conversation tool, not a certification method.

Factor	1–2 points usually indicate	4–5 points usually indicate	Evidence to capture
Function interaction	Independent stop or gate	Interdependent zones and modes	Safety-function list and cause/effect
Physical distribution	One panel and short runs	Several cabinets or machines	Layout and I/O locations
Logic change	Stable for the product life	Variants or frequent approved changes	Change calendar and revision process
Diagnostic need	LED and meter checks are enough	Event history reduces downtime	Fault-finding time and skill matrix
Expansion	No additional devices planned	Future zones or lines are funded	Spare I/O and platform lifecycle
Validation effort	Short, repeatable test path	Many logic combinations	Test cases and sign-off owner
Separation	Local function should stay independent	One governed safety platform is practical	Common-cause and independence review
Maintenance	Electrical technicians prefer visible circuits	Controls team supports safety software	Training, backups and tools
Lifecycle cost	Module replacement dominates	Engineering and downtime dominate	1-year build plus 5-year TCO worksheet

When a Safety Relay Is the Better Fit

A safety relay is an appropriate selection for a compact, dedicated-machine application with one or several fixed, relatively simple safety functions and technicians who can conduct wiring inspections. Each input and output then serves a direct purpose, making the design explainable and verifiable. The QJKH/CCH product page is a hardware reference; confirm the certified model, factory data and application evidence against its current manual.

Trade-offs arise when each added relay function—such as a light curtain or operating mode—needs another conductor, module or validation record. Avoid an arbitrary “two devices means relay, three means PLC” rule. Study the complete circuit, panel space, fault-diagnosis method and planned modifications. A relay remains a strong candidate when the fixed function stays clear at service and the validated design meets the risk-reduction target.

Readers looking at compact hardware may wish to check out safety relay modules to see current product lines and datasheet links. That product page owns current model specifications and quotations, not this neutral guide.

When a Safety PLC Is the Better Fit

A safety PLC is worth considering when several safety devices interact, a line requires multiple zones, equipment is remote, product modes change or detailed diagnostics lower maintenance risk. Multiple safety zones can share coordinated diagnostics when the certified architecture supports it. In a production application, reusable logic can be easier to review than a large set of hand-wired jumpers. Capture the hazard, test evidence, certified platform and factory network assumptions before approving the design.

Costs are substantial: engineering time for software, tested function blocks, access levels, backup, testing and subsequent requalification after a change. Final actuators and switching equipment still need a documented design in the PLC safety program. If the local team cannot maintain that record, flexibility can become a safety and availability risk; competence, backups and controlled change review must be part of the architecture.

The broader aspect of human-machine safeguarding is covered in the site’s collaborative robot safety guide and light curtain versus physical guard comparison. Those pages provide adjacent context; the selected safety controller manual still governs the application.

Safety Relay + Standard PLC Is Not Automatically a Safety PLC

Using a safety relay with a normal PLC can be a sensible hybrid control system, but it does not pass a safety designation to the normal PLC. An undocumented boundary can create nonconformity or unsafe-restart risk, depending on the machine design and jurisdiction, so the safety function must remain traceable from sensor through logic to the final switching device, with feedback, reset, restart behavior and fault codes recorded. A production buyer should retain the wiring evidence, machine application, certified components, factory test record and DGUV/IFA machine-control guidance. For regulator context on control systems, see the HSE control-system guidance.

1. Identify which terminals carry the safety function.
2. Show where the standard PLC receives status only, versus where it makes a safety decision.
3. Check independence, common-cause assumptions and fault exclusion.
4. Test the output device, feedback loop and restart interlock.
5. Record the result and the revalidation trigger.

The reverse holds true for a safety PLC: installing one does not make ordinary outputs or unchecked network paths safety-rated. Follow the manufacturer’s safety manual and have the machine application approved by the responsible safety engineer. Keep the certified device list and test evidence with the release record.

Cost and Troubleshooting Over the Machine Life

Don’t compare only the first invoice. Create two columns for project-approved build and ownership horizons (for example, one year and five years), using the functional-safety lifecycle view as context rather than a cost benchmark. Include module and I/O cost, cabinet wiring, engineering hours, commissioning, training, spare inventory, diagnostic equipment, lost productivity, software upkeep and post-modification revalidation. Use the real production application, supplier evidence and certified model data so a cost shortcut does not create rework.

Lifecycle cost = hardware + engineering + commissioning + training + spares + downtime + change/revalidation effort

One safety relay may win the initial purchase, while a safety PLC may win later approved product variants when change effort dominates. Conversely, a modest relay circuit can avoid software licensing, specialist training and a complicated validation file. Because downtime and rework affect the total cost, use archived site inputs, supplier evidence, certified factory data and a documented cost worksheet; do not publish a generic cost-savings statement.

Validation Questions Before You Specify Either Option

Begin with the risk assessment and the desired risk reduction target, then request evidence before authorizing a bill of material. Treat the architecture choice as a safety task, not a shopping shortcut. A validation gap can delay a production release; require the machine application, certified model manual and supplier data in the test record, using the HSE functional-safety guidance as lifecycle context.

• Which safety functions are in scope, and which remain outside the device?
• What input types, test pulses, reset rules and output loads are supported?
• What diagnostic coverage, fault response and response-time assumptions apply?
• Which contactors, valves or drives are monitored by feedback?
• What certificate, manual and revision applies to the exact model and firmware?
• How are software access, backups, changes and test records controlled?
• Which standards edition and local adoption does the project use?
• Who performs independent review and final validation?

ISO 13849-1:2023 and the IEC functional-safety update are useful starting points, but a public overview is not the machine’s calculation. Validate current jurisdictional requirements with the responsible safety owner and retain certified device evidence for the production application.

Decision Framework: From Hazard List to Architecture Record

The decision can be logged for audit in the Safety Architecture Selection Record. This record limits ambiguity, links the hazard to evidence, and gives the machine builder a repeatable application review with certified supplier data attached.

1. List hazards and individual safety functions.
2. Map every sensor, logic element, final switching element, feedback path and reset.
3. Score the 9 factors in the comparison matrix and write the evidence for each score.
4. Use a fixed-logic versus change-logic worksheet template to document whether each function is stable or expected to change.
5. Use a safety-function boundary checklist template to confirm the hand-off between status signals and safety decisions.
6. Compare a relay, a safety PLC and a hybrid option against the same acceptance criteria.
7. Record assumptions, selected parts, firmware/configuration versions, test evidence, owner and revalidation trigger.

Each record should explain why the architecture was chosen and point to the calculation and test file. It is not permission to overlook guarding, lockout or the machine manual. For sensor-side context, see the site’s safety area scanner engineering guide.

Specification Vocabulary for Machine Safety Reviews

Use vocabulary that appears in the applicable engineering file and tie each term to a real device, safety function and test record. Useful groups include machine safety, safety system, e-stop, relay systems, safety controller, PLC safety, PLC system, PLC-based safety, redundant channels, integrated safety, safety modules, industrial automation and control, programmable logic controllers, safety requirements, hardware and software, standard and safety architecture, relay logic and shutdown behavior. Treat terms such as SIL, safety I/O, safety applications, safety components, safety PLC project file, safety and standard PLCs, level of safety, independent safety and unsafe condition as documentation prompts, not proof that a platform supports a function. For each term, record the adopted standard edition, exact model, firmware or configuration, fault response and verification evidence. The ISO 13849-1 system-level reference is a starting point for that record; it does not replace the applicable standard text, manufacturer safety manual or machine-level validation.

Search phrases vary by plant and supplier: a team may write Siemens safety PLC, safety instrumented function, dedicated safety logic, SIL 2, safety I/O, traditional safety relays, cost difference, safety PLC’s diagnostics, using safety PLCs, safety PLC system, safety partner or basic safety controls. Reconcile those labels with the engineering file and exact certified model; a keyword is not evidence that any platform or device meets the machine’s target.

Additional search labels—safety io, safety PLC’s, need for safety, introduction of safety, specific safety, system integrator, Keyence, motion control, redundancy and Rockwell—are routing terms only. Confirm the applicable device, architecture and validation evidence before treating any label as a requirement or capability.

FAQ

What is the main difference between a safety relay and a safety PLC?

Safety relays use hardwired logic; safety PLCs run certified programs across safety inputs and outputs. Both need a validated safety function. Labels alone do not prove machine risk reduction, and a standard PLC cannot inherit a safety rating from a connected relay.

When should I use a safety relay instead of a safety PLC?

Use a safety relay for a small set of fixed functions, stable logic and a clear inspection and validation path. Reconsider it when zones, diagnostics or planned variants make extra wiring and records harder to control. Tie the choice to the complete circuit and certified device data.

When do I actually need a safety PLC?

Consider a safety PLC when several devices or zones interact, modes change, distributed I/O helps or diagnostics reduce maintenance risk. Confirm the platform, function blocks and validation resources support the required safety function. Keep a governed project file and test record for every release.

Do PLCs replace relays?

Standard PLCs can replace ordinary control relays in non-safety work, but they are not safety devices. Select and verify relay paths or safety PLCs for each safety function. Hybrid arrangements require a documented boundary between status and safety decisions, with application evidence.

Is a safety PLC always safer than a safety relay?

No. Suitability depends on architecture, component data, fault response and validation. A correctly selected relay can be the clearest answer for a simple function, while a poorly governed safety PLC can hide change-control gaps. Compare evidence, then review firmware, approved function blocks, network response time, proof-test interval, training and test records before declaring either option acceptable. Keep that evidence accessible to the validator throughout the machine life cycle, and confirm the supplier’s current manual before a production release.

References & Sources

• UK Health and Safety Executive — Functional safety
• ISO 13849-1:2023 public overview
• DGUV/IFA — Safety of machine control systems
• IEC — Functional-safety standards update
• Control.com — Introduction to safety relays
• Valin — Why use a safety PLC instead of safety monitoring relays?

Company context: QJKH/CCH’s About Us page. Product specifications and quotations: Safety Relay Modules. Standards and device claims must be checked against the current adopted edition and exact model documentation.

Editorially reviewed for structure and evidence boundaries; no customer engineering approval is implied. This document is provided for educational purposes only and doesn’t certify the safety of any machine and it isn’t a substitution for an expert safety analysis.

(Updated August 2026)

Safety light curtain vs physical guard is, at bottom, a choice between a photoelectric sensing field that stops the machine and a solid barrier that blocks reach. The decision comes down to four measurable factors: what the machine throws at people, how often people reach in, how fast the machine can stop, and which operating mode the safeguard must survive. Buyers who run those four checks in order land on the right answer without a single catalog page.

Safety Light Curtains vs Physical Guards at a Glance

Safety light curtains outperform physical guards when parts move in and out of machine access points every cycle, while physical guards outperform light curtains wherever the process ejects material or keeps coasting after power drops. Neither option is a default; each wins a different column of the table below.

How Each Safeguard Works: Sensing Screens vs Solid Barriers

A safety light curtain is a photoelectric safety device built from an emitter and receiver pair: a series of infrared light beams crosses the opening, and any interruption in detection commands the machinery to stop through dual safety outputs. Physical guards take the opposite route, placing a fixed or movable barrier between people and hazardous moving parts.

Resolution decides what the sensing screen notices: 14 mm detects a finger, 25-30 mm detects a hand, and 40-45 mm detects a body, with tighter resolution allowing closer mounting. QJKH’s ENT line, for example, spans 14/25/45 mm resolutions with response times of 6.0-30.8 ms depending on beam count and protective heights up to 1,960 mm. On the barrier side, the main types of machine guards are fixed machine guards, interlocked gates, and adjustable or self-adjusting designs, each defined by how the physical barrier meets the work.

In machine guarding applications, light curtains are used across the feed openings people work through, while safety light grids, the two-to-four-beam light barrier version of the same idea, watch whole access ways in perimeter guarding applications. The main types of light curtains split by self-test class: type 2 light curtains check themselves at intervals, and Type 4 units check continuously with redundant circuits.

Wiring differs as much as sensing. Modern light curtains hand their OSSD outputs to a safety relay or safety controller inside a safety-related control system, and older control cabinets sometimes need an interface module before those outputs land cleanly. Guard interlocks wire in as position switches, which is why retrofits often start with a wiring survey rather than a catalog.

Are Light Curtains Considered Machine Guarding?

Light curtains count as machine guarding in the presence-sensing device category, not as guards in the barrier sense. OSHA’s general machine guarding rule lists electronic safety devices among accepted guarding methods, and ANSI B11.19-2019 (R2024) treats presence-sensing devices as one engineering control family alongside guards. The distinction matters for inspections: a device must stop the machine reliably, while a guard must physically prevent reach.

A 14 mm finger-resolution curtain mounted 220 mm under ISO 13855 from a press opening delivers protection equivalent in function to a fixed barrier at that opening, provided the press stops within 100 ms; the barrier needs no math, and the curtain needs nothing bolted across the feed path.

What OSHA and Consensus Standards Require

Federal machine safety rules accept both safeguarding routes on equal terms. The controlling text, 29 CFR 1910.212, names barrier guards, two-hand tripping devices, and electronic safety devices as examples of acceptable guarding methods, then leaves the choice to your risk assessment.

“The point of operation of machines whose operation exposes an employee to injury, shall be guarded.”

Two conditions gate the light curtain route, and both come straight from OSHA. First, per the agency’s machine guarding eTool on devices, a photoelectric device suits only machines that can stop before a worker reaches the moving parts, and it doesn’t protect against mechanical failure. Second, on mechanical power presses, 29 CFR 1910.217(c) requires the presence sensing device to be interlocked into the control circuit, bans it outright on full revolution clutch presses, and sets the minimum safety distance at Ds = 63 in/s × Ts, where Ts is the press stopping time measured at roughly 90° of crankshaft rotation; add the device and interface response times when you size the real installation.

Keep two press modes separate, because inspectors do. Presence sensing as a safeguard under 1910.217(c) is one regime; presence sensing device initiation (PSDI) under 1910.217(h), where a cleared field starts the stroke, is another, with its own brake monitor requirement and an explicit exclusion for die-setting work. Shops run the first mode for years without ever qualifying for the second.

The safety requirements split cleanly by machine class, and OSHA conditions the use of safety light curtains on stopping performance in every one of them. On the international side, the functional safety chain runs three layers: IEC 61496 defines type 2 and type 4 devices, ISO 13849 rates the safety function they join across its safety levels, and IEC 61508 assigns the safety integrity level behind it all. Type 2 safety light curtains fit lower-demand points; Type 4 covers the highest safety ratings a curtain can carry. Positioning then follows ISO 13855:2024, using S = K × T + C at a 2,000 mm/s hand approach speed. Guard construction answers instead to ANSI B11.19-2019 (R2024). Our companion guides cover OSHA machine guarding requirements and Type 2 vs Type 4 safety light curtains in depth.

What Standards Apply to Safety Light Curtains?

Four standards carry the load: IEC 61496-1 and -2 (2020 editions) govern the device itself, ISO 13849-1 rates the safety function it joins, ISO 13855:2024 fixes the mounting distance, and in the United States 29 CFR 1910.212 plus, for presses, 1910.217 set the legal floor. Certification to the device standard belongs to the manufacturer; distance and integration belong to you.

Regulation text, verified in August 2026, resolves the acceptance question in one sentence: 1910.212(a)(1) lists electronic safety devices beside barrier guards as lawful guarding methods, which is why the curtain-or-guard debate is an engineering call, never a permissions call.

Protection Scope: Debris, Ejected Parts, and Environmental Limits

For any process that ejects material, the choice narrows fast: a light curtain screens people, not projectiles. Fixed and interlocked designs provide a physical barrier that intercepts mass, and solid safety barriers are the only entries in the toolbox that do. The same 1910.212(a)(1) text that accepts electronic safety devices lists flying chips and sparks among the exposures guarding must address. Robotic welding cells, machining centers throwing swarf, and grinding operations all fall on the barrier side of the line for this single reason.

Safety Light Curtain vs Physical Guard: Pros and Cons

Environment decides the rest. Washdown lines push standard IP65 housings past their limit, high-vibration mounts drift out of optical alignment, and outdoor dust plays havoc with any receiver lens. When the survey shows any of these, hard guarding or an IP67-rated curtain variant enters the plan, and the honest answer is sometimes both.

Access Frequency and Cycle Time: the Productivity Trade

Count the reach-ins before you spec anything, because that number, not the purchase order, decides which safeguard survives contact with production. Take an opening entered 40-200 times a shift and a gate cycle of 4-10 seconds, both planning assumptions to replace with your own stopwatch counts rather than published figures. At 100 entries per shift that is 7-17 minutes of motion lost per shift, or roughly 28-70 hours per line per year on a 250-day calendar.

Regulators already priced this in, in both directions. UK regulator HSE’s equipment guidance says prevention “will normally be by fixed guarding,” and where routine access is needed, names “interlocked guards (sometimes with guard locking)” as the next step, per the HSE PUWER overview. OSHA’s eTool page on guards adds that fixed guards can be suitable for high-production, repetitive work. Frequent cycles alone don’t hand the win to light curtains; frequent reach-in through the opening does.

The defeat evidence is what tips marginal cases. HSE-commissioned research on CNC machines (HSL report RR974) found interlock defeat treated as commonplace, with an override dummy key the most common method, and guards on some machines regarded as protecting the builder legally rather than the operator; the study was small-scale and qualitative, so treat it as a warning light rather than a statistic. Nobody can prop a light field open, which removes that entire behavior class. Practitioners on control forums report the counter-current too: nuisance trips have pushed more than one plant to rip curtains out and lock the fence, which is why false-trip immunity belongs in your trial checklist.

In the light curtains versus hard guarding trade, light curtains provide an open working plane and full sightlines, and light curtains offer the shortest entry time of any safeguard; the advantages of light curtains end where debris begins, which keeps the balance of safety and productivity honest. Stop-time arithmetic sets the boundary condition. Total response is the whole safety response chain: curtain, safety relay, controller scan, contactor drop-out, and machine braking, with the curtain’s 6-30 ms usually the smallest term. Every millisecond of system response adds about 2 mm of required setback at hand speed under ISO 13855, so a slow brake pushes the field away from the work and erodes the ergonomic gain that justified the curtain.

Contrary to the brochure picture, the fastest-moving line isn’t automatically curtain territory: an access point nobody reaches through in production belongs behind steel at 0 seconds of gate time per shift, and RR974’s defeat findings apply mainly where the barrier fights the task 40 times a shift.

Gate-Time Cost Ledger: Curtain vs Guard Ownership Over Five Years

Hardware is the smallest line in a guarding budget once access labor enters the ledger. One distributor’s listings put individual Leuze Type 4 curtain units at roughly $850-$4,841 depending on resolution and length, while an integrator budget guide puts a robot-cell safety package of fencing, curtains, and interlocked doors at $8,000-$20,000, about 10-15% of cell cost; treat every figure below as a planning range to replace with your own quotes, since no government or standards body publishes guarding price data.

Federal economics back the access-time framing, with a caution attached. When OSHA authorized presence sensing device initiation on presses in 1988, the agency projected a 24.3 percent average productivity improvement per press and about $162 million in annual industry savings; its 2004 regulatory review of the PSDI rule then found those benefits went largely unrealized because third-party certification burdens kept adoption near zero. The lesson for buyers: the payoff lives in access time, and process overhead can eat it. Peer-reviewed field data leans the other way for builders: a Safety Science study of 17 machinery manufacturers found they favor rigid-frame and polycarbonate guards and use light curtains less often precisely because the devices cost more, per Gauthier and colleagues, Safety Science 133 (2021). Both findings fit one ledger: steel is cheaper to own until reach-in frequency is high enough to bill the gate time.

Fill the ledger with your numbers before choosing a lane; the table is the checklist, not the verdict. PSDI-mode presses also carry recurring labor the catalog never shows: 1910.217(h) requires safeguard checks at the start of each shift and after every die change, plus at least annual operator training.

Four-Factor First Cut: Choose a Safeguard in One Pass

Four-Factor First Cut is a one-pass screen that sorts any opening into curtain, interlocked guard, or fixed guard territory using four questions in fixed order. If a factor fails, stop there; later factors can’t rescue an option the earlier one eliminated.

Ownership of the residual choice stays with your ISO 12100 risk assessment, which names each hazard and its exposure, and that document is what an inspector asks for first. When two factors tie, price the tie with the cost-of-access ledger above rather than the catalog page.

12-Application Verdict Board: Which Safeguard Each Machine Needs

Twelve common guarding applications split cleanly once the four factors run, and the board below shows where each lands across safety applications from hand-fed presses to palletizer portals. Verdicts assume a stop-capable machine in normal production mode with a part-revolution clutch where presses are involved; maintenance work sits outside every row because lockout, not a light field, isolates energy.

Curtain verdicts outnumber guard verdicts eight to four on the board, yet the guard rows hold the two highest-energy processes, welding spatter and machining swarf, where containment is worth more than any response-time figure. Press rows follow the mechanical power press rule; robot rows follow the 2025 revision of the robot integration standard noted below; the CNC row carries the defeat warning from RR974. For press applications specifically, our team documents layouts on the press machine safety solutions page. Machine-by-machine curtain choices for laser cutters, injection molding, and punching presses sit in our guide to photoelectric light curtains by machine type.

Hybrid Layouts: Muting, Blanking, and Fenced Cells with Curtain Access

Muting and blanking are the two functions that let one opening serve people and material at once. Light curtain muting temporarily suspends the whole protective field so a verified pallet can pass through the light curtain field, and the light curtain system re-arms the moment the load clears; blanking masks specific beams around a permanent fixture while the rest of the field keeps watching. Without muting logic, a light curtain stops for every load, which is exactly the nuisance-trip pattern that gets curtains ripped out. Neither is a workaround: both are engineered functions with their own sensor logic and manual reset rules.

The regulation itself writes the hybrid requirement: “Guards shall be used to protect all areas of entry to the point of operation not protected by the presence sensing device,” per OSHA’s press safeguarding guidance. A curtain across the feed opening plus steel around everything else isn’t a compromise; it’s the compliant baseline layout for guarding applications with mixed access.

Hybrid Guarding Playbook

Hybrid Guarding Playbook means one perimeter of safety fencing, curtain-protected machine access points where work flows, and muting only where verified material (never people) passes. Three moves cover most cells: palletizer entry and exit get 45 mm body-detection curtains with L-shaped mute sensor pairs; operator load stations get 14-25 mm fields inside the fence line; and every service door gets an interlocked gate, because a person who walks through a cleared field and stands inside is exactly the exposure a pass-through layout must design out with restart interlocks and full-height detection.

Layered like this, a hybrid can increase safety and throughput together, because each opening gets the safeguard its task actually fits. One rule still keeps hybrids honest: a cleared light curtain is never energy isolation. Maintenance, die-setting, and jam recovery inside the envelope run under lockout, and the playbook marks those doors accordingly.

A typical palletizer retrofit shows the pattern end to end: a fenced cell with two curtain-plus-muting portals moves pallet traffic with zero gate cycles, while the single service gate stays interlocked and locked, and commissioning closes with a measured stop-time test at each portal. If the opening you are sizing sits on a robot workcell rather than a single press, our robot cell safeguarding layouts page walks the same fence-plus-portal pattern end to end.

What’s Changing in Machine Guarding Enforcement and Standards

OSHA’s renewed National Emphasis Program on amputations is the enforcement driver to plan around: directive CPL 03-00-027 took effect June 27, 2025 and runs five years, keeping machine guarding at the top of the programmed inspection list for manufacturing. One change rewards good records: law-firm analysis of the directive reports that establishments inspected under the program in the prior 24 months with no amputations can drop off the programmed list, which turns your safeguard documentation into inspection relief.

Standards moved in the same season. ISO 13855:2024 replaced the 2010 positioning rules and tightened the geometry: the crawl-under allowance fell from 300 mm to 200 mm, vertical light grid beam spacing is capped at 400 mm (which effectively retires two-beam grids in favor of three or more), and a dynamic separation distance concept entered the standard, per the revised text summarized by machine safety trade press. Robot cells got their own refresh when the US robot integration standard ANSI/A3 R15.06-2025 replaced the 2012 edition, adopting ISO 10218-1:2025 and ISO 10218-2:2025, as reported by The Robot Report.

Technology is widening the middle ground rather than replacing either side. Vision-based systems and safety laser scanners now type-certify as protective equipment under IEC 61496 parts 3 and 4, patents keep attacking the false-trip problem of classic beams, and machinery diagnostics move onto the network. The applications of safety sensing keep growing, but none of the new safety measures changes the debris rule that anchors industrial safety practice: mass still needs metal. If you are planning a 2026-2027 project, buy to the 2024 positioning math and the 2025 robot text now, and re-run the ISO 13855 numbers on any curtain you relocate, because the machinery you keep must meet the distances of the standard you will be inspected against.

Market researchers put the safety light curtain segment near $1.84 billion in 2025 with single-digit annual growth; the figure is directional background from commercial reports, useful for budget context only.

FAQ: Safety Light Curtain vs Physical Guard

Engineering guide updated August 2026

Safety light curtain PLC integration is not simply a matter of landing two wires on two input terminals. Designers have to preserve a safety-rated path from the protective device, through evaluated logic, to the final switching elements—and then prove that the installed machine reaches its safe state soon enough.

Across Rockwell GuardLogix and Siemens fail-safe controller platforms, the practical problem is the same: define what must stop, verify the electrical contract, evaluate both safety outputs, control reset and restart, monitor downstream devices where the architecture requires it, and retain evidence for commissioning and later changes. Platform terminology differs, but the lifecycle obligation doesn’t.

Can a Safety Light Curtain Connect Directly to a PLC?

Safety light curtains can exchange permitted status with a standard controller, but any signal that performs risk reduction must remain in the validated safety-related control path. Risk assessment determines whether that path uses a safety relay or safety controller, suitable safety input and output devices, and monitored final elements.

Can I wire a safety light curtain OSSD output directly to a PLC input?

Standard programmable logic controllers may receive a permitted auxiliary or diagnostic signal, but a normal input must not be assumed to perform the required risk-reduction function. When beam interruption must command a safe state, the evaluated path normally needs safety-rated inputs, safety logic, and suitable final switching elements selected from the machine risk assessment.

Safety Function Boundary Test: 3-Layer Boundary Map

This Safety Function Boundary Test identifies every signal and device whose failure could defeat the required risk reduction.

For a small, fixed function, appropriately selected safety relay modules may be suitable. Safety controllers become useful when several guards, operating modes, zone dependencies, or coordinated output functions must be managed. Convenience does not determine the required integrity: ISO 13849-1:2023 addresses the design and integration of safety-related control-system parts, while IEC 62061 covers a machinery safety lifecycle that includes integration, verification, configuration management, periodic testing, and validation.

The physical safeguard boundary matters too. A light curtain cannot prevent access around, over, under, or behind its sensing field. If a person can pass through and remain unobserved, the design needs supplemental guarding, presence detection, or another engineered measure so the safety function cannot be reset while someone remains exposed.

Dual-Channel OSSD Wiring and Input Compatibility

Most safety light curtains provide two output signal switching devices, commonly called OSSD1 and OSSD2. Treat them as a coordinated safety-output pair, not as two interchangeable status wires. Each channel must reach a separate compatible safety input, and the evaluated logic must detect the fault relationships required by the chosen architecture.

In a vertical installation, the light curtain acts as an active opto-electronic protective device: an array of photoelectric sensors creates a series of infrared light beams to detect the presence of an object in the protected field. Interruption changes the safety outputs; the automation controller then has to bring the machine to the specified safe state through the evaluated safety system.

What happens if only one OSSD channel is wired?

Using only one channel can remove the redundancy or diagnostic coverage on which the safety architecture depends. Even one active input may appear to stop the machine during a beam test, yet an open circuit, short, or stuck output could remain undetected. That is functional motion, not proof of functional safety.

Will OSSD test pulses cause problems with PLC inputs?

OSSD test pulses can cause problems when a safety output and safety input are incompatible. Safety outputs and safety inputs may use short test pulses to reveal wiring faults, but incompatible pulse timing or enabled input tests can create nuisance trips or mask assumptions about fault detection. Do not disable tests or lengthen filters merely to clear an alarm; compare the two exact manuals and document why the selected settings remain valid.

When not to use a light curtain

Light curtains are the wrong protective equipment when interruption cannot stop the hazard before a person reaches it, ejected material remains uncontrolled, or a person can enter and stay inside the safety zone unseen. Fixed or interlocked guards, door switches, perimeter guarding with additional presence sensing, safety laser scanners, or another machine-guarding measure may be necessary. Conveyor openings can also require tunnel guards or geometry that prevents reach-around access.

For a machine-specific U.S. example, OSHA prohibits presence-sensing devices on full-revolution-clutch presses and requires guards for every point-of-operation access route that the sensing field does not protect. This example does not replace the applicability review for another machine or jurisdiction.

Basic light curtains are not automatically suitable for every light curtain application, and choosing Type 4 does not by itself create the “highest safety” for the machine. Device type, resolution, mounting, safety distance from the hazard, stopping performance, safety functionality, and integration of multiple safety devices all matter. Required safety standards and type-C machine rules decide the application—not a product label alone.

Brand names do not close this gap. Keyence safety light curtains, the Keyence GL-R Series, Schmersal light curtain systems, and other light curtain sensors each have model-specific manuals and interfaces. The right light curtain for your application is the exact device whose output, response, environment, declarations, and safety input compatibility support the validated architecture—not the most familiar logo.

Even the shortened phrase “safety curtain” should refer to a specified protective device, not a generic sensor. Its purpose is to reduce a defined safety hazard within a validated machine function.

Using a safety relay can be appropriate for a bounded function, while a safety programmable logic controller may coordinate several zones and modes. IEC 61508 and ISO 13849 address different layers of functional safety; neither permits a designer to treat ordinary electrical compatibility as proof of an achieved machine safety target.

Commissioning scenario: A new packaging cell stops correctly during ten ordinary beam interruptions, but faults after an operator brushes the edge of the field during product changeover. A channel trace shows one OSSD transition arriving outside the evaluated relationship. The team could hide the symptom by widening the discrepancy setting; instead, it checks alignment, terminal torque, cable routing, pulse compatibility, and input filtering against both manuals. A damaged connector produces the unequal transition. After replacement, the engineers rerun field interruption, both single-channel fault tests, reset, output feedback, and stopping-time measurement. The scenario shows why a passing beam test does not justify changing a safety parameter without finding the cause.

GuardLogix: From Safety Input to Signed Application

A GuardLogix project should begin with the exact device and module safety manuals, the machine safety requirements specification, and the selected Studio 5000 version. The public Rockwell DCS instruction documentation for version 37 is useful for understanding paired input evaluation, discrepancy timing, restart behavior, and fault handling, but its details must not be projected onto a different controller, module, or software revision.

Rockwell’s version 37 DCS page says the input points used by that instruction should be configured as single, because the instruction itself evaluates the dual-channel relationship. That is a version-specific instruction, not a universal setting. Follow the exact documentation for the selected input module and application instead of copying the word “single” into another configuration.

Discrepancy time is also not a nuisance-alarm knob. It represents the permitted relationship between channel transitions within the specified safety behavior. When a discrepancy fault occurs, investigate switching sequence, wiring, test pulses, filtering, mechanical alignment, and device diagnostics before considering any setting change.

Change-control scenario: During maintenance, a team replaces a failed networked safety input with the same catalog family and restores the saved controller project. Its input data appears healthy, yet the replacement has different firmware and its safety network identity has not been verified against the approved record. Production pressure makes a quick signature acceptance tempting. A disciplined GuardLogix workflow stops there: the team confirms the exact replacement compatibility, safety network number, module ownership, firmware, project signature, and affected fault tests before release. The lesson is broader than one platform. “Same family” and “online without faults” are logistics observations; neither proves that the replacement belongs to the validated configuration.

Safety signatures and locked configurations support change control; they do not prove that the mechanical stopping system, mounting position, downstream actuators, and access geometry are safe. ISO 13849-2:2012 defines validation as analysis and testing of the specified safety functions, achieved Category, and achieved Performance Level. Signed applications still need machine-level validation, and any relevant hardware, firmware, logic, parameter, network, or mechanical change needs impact review and appropriate revalidation.

Siemens F-CPU: F-DI Evaluation, Passivation, and Reintegration

The Siemens workflow uses different names but follows the same safety contract. Begin with the exact F-CPU, fail-safe digital input, TIA Portal version, light-curtain output data, and system manual. A publicly accessible older Siemens F-DI/DO module page shows how two-channel evaluation, discrepancy behavior, short-circuit tests, passivation, and reintegration can interact; the current model’s manual remains authoritative.

Siemens manuals may describe a discrepant channel using its last valid value or a zero value, depending on the configured behavior and module. That choice can change the safety response and reintegration conditions. It therefore belongs in the safety requirements specification and test record, not in a commissioning technician’s undocumented preference.

PROFIsafe status is another place where terminology can mislead. IEC 61784-3-3 notes that implementing a safety communication profile in a standard device is not sufficient to qualify that device as a safety device. Endpoint hardware, software, configuration, and application still need the required safety properties.

Reintegration scenario: A Siemens fail-safe input passivates after one channel remains low beyond the configured relationship. Once the wiring is repaired, valid process data returns and the module becomes eligible for reintegration. The machine still must not restart merely because the F-I/O is healthy. The application first confirms both safety channels, the protected-area condition, downstream output state, and the deliberate acknowledgment or reset sequence defined by the safety specification. Only then can a separate operational start be accepted. This distinction prevents a communications recovery, power restoration, or technician acknowledgment from becoming an unexpected-motion command.

Reset, Restart Interlock, and External-Device Monitoring

A light-curtain reset should deliberately restore safety readiness without starting hazardous motion, while external-device monitoring should reveal a final switching device that failed to follow the safe command. Reset location, sequence, feedback contacts, timing, and fault response must come from the safety specification and exact evaluated architecture.

Locate a manual reset where the operator can verify the safeguarded area, but cannot reach the reset while remaining inside an unobserved hazard zone. Review deliberate actuation, edge detection, stuck-button behavior, cold start, power restoration, mode changes, and reset after a communication or discrepancy fault.

External-device monitoring—or the architecture’s equivalent feedback function—checks whether final switching devices actually follow the commanded safe state. The correct placement, feedback contact type, timing, diagnostic coverage, and fault response depend on the evaluated architecture and exact manuals. There is no safe universal timeout or one wiring pattern for every contactor, drive, relay, and controller combination.

Commissioning With the Five-Fault Test Record

A beam-break demonstration proves only the most visible success path. Commissioning should also show that relevant single faults are detected, that the safe state is maintained as specified, that recovery follows the approved sequence, and that the evidence can be repeated after a change.

Five-Fault Commissioning Record

This Five-Fault Commissioning Record ties each controlled fault to its safe response, diagnostics, recovery rule, measurement, evidence identifier, and approver.

Each row needs more than “pass.” Record the precondition, test method, expected safe state, actual result, diagnostic code, response-time or stopping-time evidence, drawing and software revision, instrument identity, tester, approver, and date. Link photographs or trace files to stable evidence identifiers rather than leaving them on a commissioning laptop.

Some machinery-specific rules require checks more frequently. For mechanical power presses operating in the qualifying presence-sensing-device-initiation mode, OSHA requires specified checks at the beginning of each shift and after a die change, plus annual recertification and third-party revalidation. Do not transplant these duties or safety-distance expressions to unrelated machines; first determine which regulations and type-C standards govern the actual equipment.

Safety Distance, Current Standards, and the Limits of Code

The official ISO catalog identifies ISO 13855:2024 as the current international standard for positioning safeguards with respect to the approach of the human body; the 2010 edition is withdrawn. Its scope and exclusions matter. Machine-specific standards, local regulations, approach geometry, and foreseeable access can change what method applies.

A separation-distance result depends on the complete response chain, not only the light curtain’s response time. Inputs can include sensor response, safety input and logic delay, safe communications, output-device response, actuator and machine stopping performance, object sensitivity or intrusion allowance, mounting geometry, and measurement uncertainty. The final value must use measured and validated project data.

This guide deliberately does not provide a reusable installation distance or a copy-and-paste code example. A numerical example can look precise while hiding the wrong standard, machine class, approach direction, or stopping-time assumption. Use a qualified calculation based on the installed machine, then verify the actual stopping performance at commissioning and after relevant changes.

Integration and Procurement Checklist

“Compatible with GuardLogix” or “for Siemens PLC” is too vague for a safety-function handoff. The request should identify the exact protective device, safety I/O, controller, firmware, network, output architecture, environmental conditions, required risk reduction, and validation owner. Missing information should trigger a clarification, not a guessed parameter.

For a robot cell, include mode selection, teach operation, perimeter and in-zone safeguarding, robot and process hazards, escape or trapped-person risk, safe-speed functions, and reset visibility. The robot-cell safety applications page can help frame the device discussion, but the cell integrator must validate the complete application.

QJKH is the brand of CCH Shanghai Sensing Intelligence Technology Co., Ltd, a Hangzhou-based supplier of safety light curtains, safety laser scanners, safety relay modules, and industrial sensing products. The company states that its core team has more than 20 years of industrial-safety experience and offers original-equipment-manufacturer customization; these are first-party company statements, not independent certification evidence for a specific installation.

Frequently Asked Questions

Can a safety light curtain connect to a standard PLC?

Should I use a safety relay or a safety PLC?

What causes a dual-channel discrepancy fault?

How should a light-curtain reset work?

Can GuardLogix and Siemens use the same light curtain?

Does this guide establish the required safety distance?

Build the Evidence Package Before You Build the Panel

A defensible light-curtain integration is a chain of compatible components, explicit safety requirements, controlled configuration, physical safeguarding, measured stopping performance, fault testing, and retained approval evidence. GuardLogix and Siemens organize that chain differently, but neither platform turns a wiring diagram or a green status bit into machine-level validation.

Editorial note: Product and experience statements attributed to CCH Shanghai Sensing Intelligence Technology Co., Ltd are first-party claims; final safety performance and compliance depend on the complete validated application.

Reviewed August 2026

An ISO 13850 emergency stop is a complementary protective function that a person actuates after recognizing an emergency. Once actuated, the function is intended to avert or reduce harm; its detailed behavior must be verified against the controlled standard and applicable law. It does not replace guarding, a risk assessment, hazardous-energy isolation or validation of the safety-related control system.

What ISO 13850 Covers, and What It Does Not

Current official ISO catalog data identifies ISO 13850:2015, Edition 3 as the published international standard for the safety of machinery emergency-stop function. Its functional requirements and principles for design apply regardless of the type of energy used to provide control. Its function begins when the emergency becomes apparent: the function is intended to prevent or mitigate harm by stopping the hazardous process as soon as the machine can safely stop.

That purpose is deliberately narrower than “make the machine safe.” ISO 13850 does not replace inherently safe design, fixed or interlocked guards, presence-sensing protection, or a machine-specific risk assessment. Its public scope also excludes machines where an emergency stop would not reduce risk and hand-held or hand-operated machines. According to the abstract, the standard does not itself address reversal or limitation of motion, emissions, shielding, braking, or disconnecting. Those matters may still be essential; they are simply governed by the risk assessment and other requirements.

Start the project with a safety requirements specification that names the initiating devices, controlled hazards, intended span, safe state, stop sequence, reset conditions, diagnostic response, and verification method. This prevents a procurement list from becoming the design by accident. It also gives electrical, mechanical, software, and commissioning teams one shared definition of what the emergency-stop function must achieve and what remains outside its scope.

ISO 13850 Requirements at a Glance

Good reviews don’t start with a catalog number. Concise public requirements and affirmative regulatory language become questions a design team can verify. This table is no alternative to the official ISO 13850 standard record.

Standards Terminology Cross-Check

• Understanding ISO 13850 means separating a machine safety standard from law: ISO 13850 specifies functional requirements and design principles for the emergency stop function on machinery, while EN ISO 13850 or another EN ISO adoption, the Machinery Directive, and a later regulation describe separate regional compliance layers.
• The purpose of the emergency stop is to reduce the risk in emergency situations; the general requirements for the realization of the emergency stop apply independent of the type of control energy, while the control device carries the emergency stop command.
• Emergency stop safety depends on the complete safety systems architecture: an emergency stop function based on risk assessment must remain available and operational, provide quick access and clear identification, and enable operators to stop machinery.
• Under IEC 60204-1, Safety of machinery – Electrical equipment of machines – Part 1, review braking or disconnecting behavior.
• Best practices for safety management systems include tests that stop a machine under representative conditions and measure the result; in robotics or conveying applications, the hazard review may include entanglement as well as crushing or uncontrolled travel.

Emergency-Stop Actuator Shape, Color, Marking, and Protection

What is the ISO standard for emergency stop buttons?

ISO 13850 is the central function-level standard, but an emergency-stop button is only one component. Product requirements for the actuator, electrical-equipment rules for the machine, and safety-related control-system design also matter. Supplier declarations for a red mushroom button cannot prove that its location, stopping response, reset logic, diagnostics, or achieved safety performance are adequate on the installed machine.

Most designers recognize a red, readily operable actuator against a yellow background, with a shape that supports rapid palm or hand operation. In the United States, OSHA 29 CFR 1910.144 specifically requires emergency-stop bars, buttons, and switches used for emergency stopping of hazardous machinery to be red. An OSHA interpretation confirms that general industry rules do not independently require the word “PUSH.” Do not turn a useful marking convention into an invented universal legal rule.

Protection against accidental operation creates a real design tradeoff. Shrouds may reduce unintended contact, but a deep cover can delay access, obscure identification, or prevent palm actuation. Review the device in context: gloved hands, approach direction, operator posture, nearby controls, impact exposure, and foreseeable panic use. Ask not “Does it have a guard?” but “Can it be actuated quickly when needed without creating an unacceptable nuisance-actuation risk?”

Placement, Accessibility, and Span of Control

Place emergency-stop devices from the perspective of foreseeable work, not only the primary operator panel. Review loading and unloading points, setup positions, maintenance access, long conveyors, remote stations, and any location where a person may recognize a developing emergency. Accessibility includes clear reach, unobstructed approach, visibility, and a design that remains understandable during abnormal operation.

Whole-machine stopping is a design-review starting assumption, not a quotation from the public catalog or an unconditional rule for every linked installation. In a multi-zone system, stopping every section can sometimes create another hazard or cause unnecessary disruption without reducing the relevant risk. Any limited span must therefore be deliberately defined, risk justified, identifiable to the user, and verified against the controlled standard, the applicable type-C standard, and the machine risk assessment. An operator should never have to guess which section a button will stop.

Stop Category 0 or 1? Choose by Risk, Not Habit

Category 0 means stopping by immediate removal of power to machine actuators. Category 1 means a controlled stop with power available to achieve the stop, followed by removal of power when stopping is complete. Notice the phrase to machine actuators: Category 0 does not automatically mean indiscriminately removing all power from every subsystem.

Immediate total isolation can be the wrong response when braking depends on powered control. UK Health and Safety Executive records describe woodworking run-down accidents where total isolation removed power before direct-current braking finished. This is not a prescription for Category 1 on every high-inertia machine; it is proof that “cut all power fastest” is an unsafe universal shortcut.

Consider a short, lightly loaded conveyor and a vertical high-inertia axis. With a verified short coast, the conveyor may reach its safe state through immediate actuator-power removal without exposing anyone. By contrast, the axis may require controlled deceleration or holding behavior to avoid a drop or uncontrolled travel. These examples illustrate the decision inputs; neither category can be selected without the actual machine data.

What are the five requirements of an E-Stop device?

“Five requirements” is useful search shorthand, not a normative five-item quotation. At minimum, the actuator is recognizable and accessible; actuation initiates the defined safe stopping behavior; the command latches; manual release or reset does not restart motion; and the safety-related control system achieves the integrity required by the risk assessment. Beyond that shorthand, the complete design depends on span, environment, diagnostics, stored energy, stopping time, machine-specific standards, and validation.

Latching, Release, Reset, and Restart Are Different Events

An E-stop actuator should remain engaged after operation so that the stop command persists until intentional manual release or reset. That mechanical action is not permission to move immediately. EU machinery requirements express the essential distinction clearly: disengaging the device permits restarting, but does not restart the machinery. A separate deliberate command is required.

Validate more than the happy path. Can the reset location see the controlled hazard zone? Can a person release one zone while another remains occupied? Does restoration of supply cause an automatic restart? Can a control-program transition bypass the reset interlock? In a multi-zone machine, document which reset acknowledges which span and what indications show that other spans remain active.

Reset should follow investigation of the emergency and restoration of safe conditions. It should not become a remote “clear fault” button that hides why the function operated. The safety requirements specification should define the states, transitions, permitted commands, and fault responses before software or wiring is implemented.

Integrating an E-Stop with a Safety Relay and Control System

ISO 13850 defines the emergency-stop function. Architecture and achieved control-system performance depend on the risk assessment and applicable functional-safety design standard. Safety relays can monitor input channels, logic, reset conditions, output contactors, and certain faults, but they cannot rescue a topology that makes faults invisible.

“Hardwired does not mean fail-safe.”

Series-connected devices can obscure device-level faults upstream, leaving a relay or programmable safety controller unable to determine what it cannot see. Define required performance, channel architecture, diagnostic coverage, contactor feedback, reset monitoring, and fault response as one system. For the performance calculation and validation boundary, use the site’s ISO 13849 performance level guidance.

When buying hardware, compare documented input compatibility, output configuration, feedback monitoring, reset modes, environmental limits, and relevant certifications among hardware options for monitored emergency-stop loops. For wiring patterns, external-device monitoring, contactor feedback, and relay fault diagnosis, continue to the separate guide on E-stop circuit design and relay monitoring. Keeping that circuit system material separate prevents a component discussion from hiding the emergency-stop system analysis here.

Verification, Commissioning, and Periodic Testing

Commissioning must verify the installed function actually does what it’s supposed to do. Run each device from realistic machine states and loads; watch which motion ceases; measure the pertinent stopping behavior; check latched state, indications, reset, and independent restart; and address detectable faults. Factory acceptance provides one baseline, not an ongoing inspection program.

Record the quantities that make the result repeatable rather than writing only “pass.” Depending on the machine, useful fields can include stop time in ms, coast distance in mm, speed in rpm or mm/s, test load in kg, pressure in bar, control voltage in V, and braking current in A. State instrument identity, calibration status, sampling method, operating mode, and acceptance limit. These are evidence fields, not universal acceptance values.

Do not invent a universal calendar interval. ISO 13850 does not produce one period appropriate for all machinery, but that does not mean “test whenever convenient.” Regulatory requirements applicable to the machine, a type-C standard, the risk assessment, manufacturer instructions, use severity, fault history, or site rules may require fixed checks. OSHA’s mechanical-power press requirements include a specific mode with 125% stop-time comparison and a brake-monitor tolerance of 10% or 10 ms. Those values belong to that press rule, not to all machinery.

Retest after any change that may influence the safety function: repositioning an actuator, new guarding, changed machine span, software update, drive or brake replacement, altered load or speed, contactor substitution, or a near miss. Place the emergency-stop evidence within the hierarchy described in functional safety standards for machinery.

Regional Compliance Cross-Check: OSHA, ANSI, IEC, and EU Use

Standards and law occupy different layers. European Commission guidance says use of harmonised standards is voluntary: manufacturers may use another technical solution, but they must still demonstrate compliance with mandatory essential requirements. In the United States, ISO 13850 is not itself an OSHA regulation. Begin with the market, machine, industry, and actual legal provisions—not with a supplier certificate.

If your research starts with “ISO 13850 emergency stop PDF,” obtain the current controlled edition from ISO or an authorized standards source rather than relying on an undated copy. A search for “ANSI emergency stop requirements” also does not identify one universal United States rule: determine the machine type, industry, jurisdiction, and current consensus standards before selecting the design basis.

What are the OSHA emergency stop requirements?

No single, universal OSHA E-stop code can be summarized as “follow ISO 13850.” OSHA laws differ depending on machinery and industry. The general safety-color rule states all covered emergency-stop controls shall be red, but other rules—for example, certain power-press provisions—include machine-specific controls, stopping criteria, and tests. Find the rules that are relevant to the actual equipment and avoid drawing generic conclusions about stop category, circuit design, labels, or test intervals.

No verified 2025 or 2026 replacement edition was found in our standards check: official ISO catalog identifies ISO 13850:2015 Edition 3, and official IEC catalog identifies IEC 60204-1:2016 with Amendment 1:2021 as the consolidated edition. System suppliers can assist with integrating compatible industrial safety solutions, but compliance verification and machine validation remain project responsibilities.

Emergency-Stop Design Review Matrix

Use this matrix as a review aid alongside the official ISO 13850 record, the complete controlled standard, the machine risk assessment, and applicable legal requirements.

Apply the matrix at requirements review, design release, factory acceptance, and commissioning handover. If there’s a No-Go item, provide evidence or a revised design—not a more confident assertion. Ensure the emergency-stop function remains part of the hazard analysis, electrical diagrams, software requirement specification, component list, calculations, test procedure, and retained validation results.

CCH Shanghai Sensing Intelligence Technology Co., Ltd. supplies safety sensors and relay modules and supports original-equipment-manufacturer discussions for industrial automation projects. Its team reports more than 20 years of industry experience. Those capabilities can support component selection and technical coordination, but they do not establish conformity of the complete machine. The project must assign and document responsibility for the final risk assessment, architecture, legal conformity, installation, and validation under the applicable law and contract.

Frequently Asked Questions

References & Sources

• International Organization for Standardization – ISO 13850:2015 catalog, scope, edition, and status
• International Electrotechnical Commission – IEC 60204-1:2016 with Amendment 1:2021 consolidated edition
• US Occupational Safety and Health Administration – 29 CFR 1910.144, safety color code
• US Occupational Safety and Health Administration – emergency-stop color and labeling interpretation
• US Occupational Safety and Health Administration – 29 CFR 1910.147, hazardous-energy control
• EUR-Lex – Directive 2006/42/EC, Annex I emergency-stop requirements
• European Commission – machinery legislation and 20 January 2027 transition
• European Commission – voluntary use of harmonised standards
• UK Health and Safety Executive – powered-braking and isolation failure example
• UK Health and Safety Executive – machinery safeguarding and stopping guidance

Editorial Note: Public catalogues and regulatory resources were consulted during August 2026. The full standards can be purchased or accessed through authorized sources, and their current regional acceptance should be confirmed before finalizing machine acceptance.

Updated June 2026 · Reviewed by the CCH Sensing technical team.

Collaborative robot safety is the set of design limits, collaborative operating modes, and risk controls that let a robot share a workspace with people without injuring them. It’s also one of the most misunderstood ideas in factory automation. Marketing says a cobot is “inherently safe,” so you can take it out of the box, stand next to it, and skip the fences. In reality, safety isn’t a property the robot carries around with it, it’s a property of the application: the arm, the tool on the end of it, the part it’s moving, the speed it run, and the people who share its space. Get that distinction wrong and a “safe” cobot will still send someone to the emergency room.

This guide is written by a safety-sensor manufacturer, so it is deliberately blunt about where power-and-force limiting stops and where an external light curtain, area scanner, or safety relay has to take over. We will cover the four collaborative operation modes from ISO/TS 15066, the body-region force limits that decide whether contact is acceptable, the standards stack (including the major 2025 revision of ISO 10218), how to run a risk assessment, and the five dangerous assumptions that get people hurt.

What Collaborative Robot Safety Really Means

A collaborative robot, cobot for short, is a robot designed to work alongside humans without a traditional safety fence. But “designed to” isn’t the same as “is.” Here’s the principle that everything else in this guide hangs on, what we call The Application-Safety Principle: a cobot is never safe or unsafe on its own; the application is what gets risk-assessed and signed off. That same arm is safe carrying a foam probe and dangerous carrying a deburring spindle.

That matters because the robot is only one piece. Under the standards, the bare robot is “partly completed machinery”; the thing that has to be made safe is the complete cell, robot, end effector, workpiece, layout, and the people. The U.S. Occupational Safety and Health Administration is explicit that there’s no robot-specific OSHA standardrobots are regulated under general machine-guarding rules (29 CFR 1910.212) and the General Duty Clause, and “a combination of controls and safeguarding should be used.”

What makes a cobot safe?

Four things, in order: (1) the robot’s built-in safety functions, power, force, torque and speed monitoring that trigger a protective stop; (2) the collaborative operation mode you choose for the task; (3) any external safeguarding the risk assessment calls for; and (4) the risk assessment itself, which ties the first three to your tool, payload and layout.

Skip the fourth and the first three are just features on a spec sheet. Those built-in safety functions, the safety features and protective features of the robot system, the extra safety measure an integrator adds, and the safety mechanisms that fire on a collision all combine so the machine can run around people, yet none of them removes the duty to assess how human workers actually come into contact with the robot. Field experience backs this up: lighter cobots stop on light contact, but “larger ones with more inertia” hit harder, so mass and payload change the answer.

The Four Types of Collaborative Operation (ISO/TS 15066)

ISO/TS 15066the technical specification that supplements ISO 10218, defines four collaborative operation modes. An application can combine them, and each one implies a different stop trigger and a different safety device. This is the table the top search results describe in prose but never lay out:

Universal Robots, which helped write the standard, notes that in practice only SSM and PFL deliver genuinely fence-free collaborative applications; the monitored stop is really a faster-restarting guarded cell, and hand guiding, driving the arm through hand-guided controls, is a teaching aid. Across collaborative robot applications, human-robot contact is the variable that decides the mode, so pick the mode for the task, not the other way round.

Power & Force Limiting: The Body-Region Force Ceiling

Power and force limiting is the mode people mean when they say “cobot.” It works by guaranteeing that any contact stays below the point where a human feels pain or injury. Those thresholds are not a marketing number, they come from ISO/TS 15066 Annex A, which sets maximum permissible force and pressure for 29 specific body locations (grouped into 12 body areas), based on pain-onset research. We call this reference The Body-Region Force Ceilingand almost no competing guide prints it:

Two numbers in that table do the most work. First, the face at 65 N is the lowest force ceiling on the body, which is why a cobot working near head height needs extra scrutiny. Second, the standard splits every limit into transient (a free impact, where the body can move away) and quasi-static (clamping or trapping, where it can’t). Quasi-static ceilings run roughly 40–65% of the transient values, because sustained compression damages tissue at lower force.

Practically, PFL cobots run between 250 and 1,000 mm/s, and the permissible speed falls as the effective mass (robot + payload + gripper) rises. Engineers patenting this field, for example US 11,453,122 B2, a torque-sensor-per-axis collaborative system, are all chasing the same thing: detect the contact fast enough to stop under the limit. In practice the amount of force and the torque applied at every joint must stay under the allowable ceiling, and the end-of-arm tooling, an electric or pneumatic gripper, counts toward it, because a sharp tool raises the risk of injury even when the arm itself is compliant.

Speed & Separation Monitoring: Letting a Cobot Run Faster

The trouble with PFL is that staying under the force limits forces the robot to crawl, Universal Robots admits the speed “will likely be too low to be useful for high-risk applications.” Speed and separation monitoring fixes this by keeping a measured gap between human and robot. When the operator is far away the robot runs at production speed; as they approach it decelerates; if the gap drop below the minimum protective separation distance, it stops.

That distance is calculated, not guessed. ISO 13855 gives the form S = K·T + C, where K is the human approach speed (the standard value is 2,000 mm/s), T is the total system reaction time (sensor response + robot stopping), and C is an intrusion/uncertainty allowance.

SSM is where an external sensing layer earns its keep. The NIST testbed work and the peer-reviewed SSM literature both stress that the sensing must itself be safety-rated and validated, not a standard automation scanner repurposed for safety. Our safety laser scanner guide walks through zone configuration in detail.

The Standards Stack: ISO 10218, ISO/TS 15066 and ANSI/RIA R15.06

Three documents govern cobot safety, and they’re layered, not interchangeable:

The hierarchy underneath them matters too: risk assessment follows ISO 12100, and safety functions must hit a performance level (PL d per ISO 13849-1) or safety integrity level (SIL 2 per IEC 62061) appropriate to the risk. Roberta Nelson Shea, Universal Robots’ Global Technical Compliance Officer, long-time convenor of the ISO robot-safety committee, and the leading authority on these documents, has spent decades stressing that the standard is a floor, not a ceiling.

When a “Fenceless” Cobot Still Needs Guarding

Here’s the part the cobot brochures skip. A power-and-force-limited robot manages blunt contact, it does nothing about a sharp, hot, or heavy end effector. Robotiq’s own palletizing example makes the point: moving multi-kilogram boxes at head height is “intrinsically unsafe,” so above a crawl that cell require a safety device regardless of PFL.

Are cobots safe to work without a fence?

Sometimes, and only when the risk assessment proves it for that exact tool, payload, speed, and layout. Trigger questions: can the end effector cut, burn, or crush? Can a body part be trapped against a fixture? Does the cycle need to run faster than PFL allows?

If any answer is yes, add a presence-sensing layer, a safety light curtain at a load station, an area scanner for floor zones, and a safety relay to execute the monitored stop. Each device must carry a rating matched to the risk (PL d/SIL 2, or Type 4 PL e for finger protection). For a side-by-side of the presence devices, see our scanner vs. light curtain comparison and the broader machine-guarding light curtain overview.

The 6-Step Cobot Risk Assessment Walk

Every standard points back to the same task-based process from ISO 12100. Here is The 6-Step Cobot Risk Assessment Walk we use, condensed:

Done well, the process is really risk reduction in stages: you reduce the risk by choosing the mode first, then layer safety controls and a safety system sized to the specific safety requirements and safety needs of that robotic system. Operators still need a robot safety training program covering the cell’s safety protocols before the line run. One discipline most teams miss: the risk assessment is a living document, so a new gripper or a new part program changes the risk profile and forces a review, a point industry trainers and groups like SACA keep repeating.

5 Fenceless-Cobot Assumptions That Get People Hurt

From field experience and the standards, these are the assumptions worth auditing before anyone stands next to the arm:

• ⚠️“A cobot is safe out of the box.” The robot is partly completed machinery; only the assessed cell is safe.
• ⚠️“PFL means no risk assessment.” Force limiting addresses blunt impact only, it says nothing about your tool, and the assessment is still mandatory.
• ⚠️“Slow always means safe.” A slow arm with a blade, a hot tip, or a clamping fixture still injures.
• ⚠️“Any gripper and payload are fine.” Effective mass sets the speed ceiling; a sharp or heavy payload can void PFL safety entirely.
• ⚠️“A CE-marked robot means a compliant cell.” The robot’s mark covers ISO 10218-1; the integrated cell needs its own conformity under 10218-2.

Why isn’t cobot safety as simple as it first appears?

Because the marketing answers a different question than the standard does. “Is the robot safe?” gets a confident yes; “is this robot application safe?” gets “it depends on the tool, the speed, and the people.” Applied Manufacturing Technologies puts the most common error plainly: the misconception that operators can share the same space as a PFL robot with no guarding “isn’t always” correct.

A peer-reviewed socio-technical review reaches the same conclusion, machines don’t always behave as assumed, so the inherent-safety belief has to be tested, not trusted.

Cobot Safety by Application: The Four-Mode Fit Test

Different jobs land on different modes and different devices. Use The Four-Mode Fit Testmatch the application to its likely mode and the safeguarding it usually needs:

Whatever the application, the safe-stop function in the background is usually a safety relay module tying the sensors to the robot’s safe inputs. For a full traditional robot-cell layout, the caged cousin of the collaborative cell, see our safety for robot cells solution.

“The question we ask integrators is never ‘is the cobot safe?’ — it is ‘what does the end effector do, and how fast?’ On a finger-protection load station we still specify a Type 4 PL e light curtain even on a force-limited arm, because PFL does nothing about a 200 N/cm² pinch from a sharp gripper.”

CCH Sensing Application Engineering team

Industry Outlook: What ISO 10218:2025 Changes for Your Next Cobot

The most important recent change is regulatory, not technological. In January 2025 the third editions of ISO 10218-1 and ISO 10218-2 were jointly published, and they make functional-safety requirements explicit rather than implied, and fold the collaborative content that lived in ISO/TS 15066 into the 10218 series itself. Shortly after, ANSI and A3 published a revised R15.06 adapted directly from the 2025 ISO editions.

For a buyer or integrator, the action item is concrete: stop treating ISO/TS 15066 as a standalone spec, and confirm which edition your robot OEM and your integrator are certifying to on your next install. A cell designed and documented against the 2011 standard is not automatically wrong, but during a transition window auditors and customers will increasingly expect the 2025 baseline. For context on scale, the reason the standards bodies moved, the IFR’s World Robotics 2025 report counted 542,000 industrial robots installed in 2024, the fourth straight year above 500,000; that volume of human-adjacent automation is what drove the rewrite (market figures here are background only).

On the horizon, skin-like tactile sensors and AI-vision human tracking promise faster, finer detection and better safety performance, but neither is yet certified for advanced safety use, so across real use cases the compliant fence-free cell still rests on the four modes, the force ceilings, and a documented risk assessment. Robotic safety of industrial robots and robot systems, collaborative or not, is still earned application by application.

Frequently Asked Questions

Updated June 2026 · Reviewed by the QJKH technical team

Light curtain blanking is the function that let you tell a safety light curtain to ignore part of its protective field so a fixture, conveyor, or workpiece can sit in the beams without stopping the machine. It’s the single most useful, and most misunderstood, feature on a presence-sensing safeguard, because the moment you blank a beam you also change how well the curtain detects a hand. This guide explains the three types of blanking, how blanking differs from muting, how it forces you to recalculate your safety distance, and how to configure it without quietly defeating your own protection.

What Is Light Curtain Blanking?

A safety light curtain projects a grid of infrared beams from a transmitter to a receiver, and when an object interrupts enough beams the safety outputs (OSSDs) de-energize and stop the machine. Blanking is the configured exception to that rule: it lets a defined set of beams stay broken without triggering a stop.

Whenever the field is interrupted elsewhere, that machine stoppage still keeps an operator out of the hazardous area. Engineers also call it the blanking function, and on most light curtain systems it’s disabled by default until an integrator deliberately enable and teaches it.

In practice, the purpose is simple. Many machines have something that must sit inside the protective field, a conveyor rail feeding a hydraulic press, a clamping hose, a robotic fixture, or a sheet of stock. Without blanking, that permanent obstruction would hold the curtain in a tripped state and the machine would never run. With blanking, the curtain tolerates the known object while still protecting the point of operation around it.

IEC 61496-2 classifies these curtains as active opto-electronic protective devices (AOPDs), and blanking is a defined option within that standard rather than a vendor add-on. QJKH engineers size each blanked zone deliberately, because reducing the grid changes the ISO 13855 safety distance and the reach-through risk, not just the wiring. There is one detail every integrator should internalize: when you blank a portion of the light grid, the blanked area extends the full depth from transmitter to receiver. It is a tunnel through the protected area, not a small patch on one face, which is exactly why blanking is treated as a safety-related decision, not a convenience setting.

The Three Types of Blanking: Fixed, Floating, and Reduced Resolution

Most vendor glossaries list “two types of blanking.” In the field there are three, and the difference decides whether your object can move. Fixed blanking holds a static set of beams open at one location. Floating blanking lets a defined number of adjacent beams be broken anywhere within a range, so the object can travel. Reduced-resolution (programmable) blanking teaches the curtain the object and tolerates it while coarsening the detection grid. Choosing the wrong one is a common cause of nuisance stops and of over-blanking.

What is the difference between fixed and floating blanking?

Fixed blanking ignores a set of beams at one location, so it suits an object that never move, such as a guard rail or a permanent bracket through the field. Floating blanking ignores a set number of adjacent beams but lets their position shift within a range, so it suits an object that travels, like coil stock that rises and fall.

A useful rule: if the object is bolted down, fix it; if it wanders, float it. One advanced variant, floating blanking with compulsory object presence, inverts the logic: the blanked beams must stay occupied, so removing the object faults the curtain and prevent a restart.

Blanking vs Muting: The Difference Engineers Mix Up Most

Blanking and muting both let objects pass a safety light curtain without stopping the machine, but they aren’t interchangeable. Blanking suspends part of the field continuously for a stationary or repeating object; muting suspends the entire field briefly for a transient transport event, and it relies on additional sensors to decide when it’s safe. Engineers on PLC forums report the two are routinely confused, and that support varies by manufacturer, so getting the distinction right at the design stage matter.

Standards back this up. On mechanical power presses, OSHA permits muting, “bypassing of the PSD during the upstroke of the press slide”, only “for parts ejection, circuit checking, and feeding,” per OSHA’s Machine Guarding eTool. Blanking, by contrast, runs throughout the cycle. If you need to suspend protection only during one phase of the machine cycle, you want muting; if you need to tolerate a fixed obstruction at all times, you want blanking. For a deeper treatment of the timed-bypass case, see our guide to muting a safety light curtain.

“The mistake we see most is a plant using blanking where the application actually needs muting, or vice versa. Blanking is for the object that lives in the field; muting is for the object that passes through it. Get that backwards and you either fight nuisance stops or you leave a gap open longer than you should.”

How Blanking Changes Detection Capability and Safe Distance

Blanking is not free. Every beam you blank or float enlarges the smallest object the curtain can still detect, its detection capability, or resolution, d. Because the minimum safety distance under ISO 13855 depends directly on d, blanking can push the curtain farther from the hazard. ReeR and other ESPE makers flag this explicitly: using the blanking function “may need a recalculation of the safety distance due to the modified detection capability.” This is the catch that thin guides skip.

ISO 13855 sets the minimum distance as S = K × T + C, where K is the approach speed (2000 mm/s for a hand reach, or 1600 mm/s in some cases), T is the total stop time of the machine plus the curtain’s response time (typically 14–50 ms), and C is an intrusion term tied to resolution. For a vertical curtain detecting fingers or hands (d ≤ 40 mm), C = 8 × (d − 14) mm.

Exact numbers depend on your measured stop time T, the approach direction, and machine geometry, so treat the example as a method, not a fixed answer, request a real stop-time test on your press before finalizing the mount. The takeaway holds regardless: blank more, and you must either accept a longer safe distance or add complementary guarding. For the underlying detection grid, our explainer on finger and hand protection resolution shows how 14 mm, 30 mm, and 40 mm grids compare.

How to Configure Blanking on a Safety Light Curtain

Blanking is configured at the curtain itself, through DIP switches, a key-switch teach box, or a software tool, and on most light curtain systems it ships disabled. An integrator enable it, teaches the blanked zone by blocking the relevant beams in teach mode, verifies the visual indicator, then locks the setup under supervisory control before returning the unit to run mode. It’s a deliberate, recorded change, not a casual one.

Behind that sequence sit several choices. A selector switch sets the mode of operation, and the software tool lets you programme the blanked beams, run diagnostics, and confirm the curtain’s specification before you commission it, the selection, configuration, and commissioning steps that IEC/TS 62046 sets out for presence-sensing protective equipment. Teaching actuates the chosen beams; removing the object can deactivate them or fault the curtain, based on how blanking is set up. Decide too whether the curtain uses automatic reset or a manual reset that holds the fault until a reset button is pressed, and make sure a key switch or password stops unauthorized staff overriding the blanked area. In practice, on a typical press-brake production cell, the integrator teaches the two beams the locating rod occupies, writes the DIP positions onto the setup sheet, then locks the key switch before the shift starts, so the next operator inherits a documented, repeatable configuration rather than a guess.

• ✔ Run a risk assessment first, confirm blanking is permitted for this hazard.
• ✔ Choose the type (fixed, floating, or reduced resolution) from the object’s motion.
• ✔ Teach the minimum number of beams; don’t over-blank “for margin.”
• ✔ Recalculate the safety distance for the new detection capability.
• ✔ Lock the configuration behind a key switch or password, and document it.

Can blanking be changed without re-validating the machine?

No. Any change to the blanked zone change detection capability, which changes the required safety distance and therefore the safeguard’s validity. Treat every blanking change as a re-validation event: recompute the distance, confirm complementary guarding still covers reach-over and reach-under, and re-test the stop function.

Wintriss puts it plainly in its press guidance: adjust blanking as jobs change and “make it part of your setup procedures.” A blanked zone left over from a previous job is one of the quietest ways to compromise a working safeguard.

Where Blanking Is Used: Press Feeding, Conveyors, and Fixturing

Blanking earns its keep wherever a known object has to share the protective field with the operator. A common case is an empty pallet entering a cell on a conveyor that feed a hydraulic press: a few lower beams are blanked so the pallet passes, yet the curtain still trips if someone stands on it.

Other common cases are coil stock that rises and fall, clamping hoses that travel with the slide, and robotic fixtures that protrude into the field on every cycle.

A real scenario show why type selection matters. A fabricator running a press brake had a locating rod that protruded through the lower edge of the light curtain on every bend. Fixed blanking failed because the rod shifted a few millimetres between jobs and tripped the curtain; switching to floating blanking of two adjacent beams let the rod travel within its range while keeping the rest of the field live. That fix took minutes once the team stopped treating a moving object as a static one, and it removed roughly a dozen nuisance stop, and the downtime they caused, per shift without weakening protection at the point of operation. On the press itself, the operator still initiates each cycle with palm buttons; blanking never replaces that two-hand control. Where a layout need a whole floor zone protected rather than a flat plane, a safety laser scanner replaces the curtain instead of blanking around the obstacle.

These patterns repeat across packaging, automation, and robotic cells. If you’re matching a curtain to one of them, our guide to press machine safeguarding maps the curtain, blanking, and stop logic to that layout.

5 Field Mistakes That Void Type 4 Blanking

A Type 4 curtain delivers the highest assurance an ESPE can provide, but blanking is a place where good hardware gets undermined by configuration. These five mistakes show up repeatedly in audits and forum threads.

1. Confusing blanking with muting, using a continuous bypass where the application need a timed, sensor-gated one (or vice versa).
2. Over-blanking “for margin”floating more beams than the object need, enlarging the blind zone and the safety distance.
3. No object-presence monitoringleaving an open tunnel an operator can reach through when the object is absent.
4. Not recalculating the safety distancekeeping the old mount after blanking degrades detection capability.
5. Undocumented, unlocked changes, a blanked zone left from a previous job, with no key switch and no record.

Each of these is a reason OSHA requires that “guards must be used to protect all areas of entry to the point of operation not protected by the presence sensing device”, blanking creates exactly such an unprotected area, and the surrounding guarding has to account for it. Complementary measures close the gap: fixed guards, a horizontally mounted curtain to cover a pass-through, or mirrors used to wrap the field around a corner, though each mirror costs roughly 10% of available scanning range, so alignment matters. If you’re wiring the safeguard, our safety light curtain wiring diagram shows where the output and reset signals belong, and the broader machine guarding with light curtains guide covers complementary fixed guards.

Standards and Compliance for Blanking

Blanking sits at the intersection of several standards. The curtain itself is built to IEC 61496; the way you select, position, and configure it, including blanking and the “additional means” needed to stop someone reaching through a blanked area, is the subject of IEC/TS 62046. Distance comes from ISO 13855, performance level from ISO 13849-1, and in the United States the legal backstop for presses is OSHA 1910.217 with ANSI B11.19 as the consensus safeguarding standard. Beyond the formal standards, published guidelines for safety light curtains from associations and vendors translate these clauses into setup practice. Remember too that a light curtain is one safety device within a larger safety system: the blanking output passes through the machine control as a control device signal, the active protection field must still be validated, and local laws can impose stricter duties than the standards themselves.

Two anchors are worth citing directly. OSHA 29 CFR 1910.217 governs presence sensing on mechanical power presses, and general guarding duties fall under OSHA 29 CFR 1910.212. International positioning math is defined in ISO 13855. The choice between a Type 2 and Type 4 device also affects how much you can safely blank, our Type 2 vs Type 4 risk-based selection guide walks through that decision.

Industry Outlook: Blanking Moves from DIP Switches to Monitored Software

What is changing in blanking is not market size, it is traceability. Regulators and standards bodies are tightening how a blanked safeguard must prove it has not been quietly defeated, and the revision of IEC/TS 62046 toward EN IEC 62046:2026 re-codifies the “additional means” required around blanked areas. For a buyer, that means the audit risk of a silently over-blanked curtain is rising, and the answer is configuration you can prove.

Technically, that’s pushing blanking off bare DIP switches and onto monitored, software-tool configuration, password-protected, logged, re-loadable, and backed by on-board diagnostics that speed troubleshooting when a blanked job won’t validate. A blanking setup you can export, version, and present to an auditor is worth more than a switch position no one recorded. Market-research houses project the broader safety-sensor segment growing through the late 2020s, but treat that figure as background only; the decision driver for a 2026 purchase is whether the curtain’s blanking can be locked down and documented.

For example, a 2026 compliance audit increasingly asks to see the exported blanking configuration file, not just a switch position, and a plant that can’t produce one risks a finding even though the hardware is sound. If you’re specifying now, prioritize curtains whose blanking is software-configurable with object-presence monitoring, and write the re-validation step into your job-change procedure so the proof exists before an auditor asks.

Frequently Asked Questions

LiDAR vs radar is, at its core, one engineering trade-off: LiDAR resolves shape via a dense 3D point cloud, while radar resolves speed and pushes through fog. For an industrial machine detection problem – an AGV crossing a load dock, a gantry crane tracking a load, a collaborative robot working in the same space as people – this difference can be between seeing the edge of a pallet and simply seeing… a return. This guide reviews both on accuracy, range, weatherability, price and application to help identify use cases where one may be preferable or even better to combine the technologies. (Updated June 2026).

LiDAR vs Radar at a Glance, The 4-Sensor Capability Grid

Most pages that compare LiDAR and radar limit their analysis to two options. In reality, when choosing a sensor for industrial use, you likely have four active remote sensing options – LiDAR, radar, ultrasonic, and infrared – to choose from. Our comparison uses a four-sensor capability grid, rather than the limited two-column comparison, to determine which technology best suits your application’s unique needs. At the core is a fundamental trade-off which we’ll refer to as the shape vs. speed divide.

Since both lidar and radar employ similar methods for active remote sensing, our comparison of these technologies presents their opposite strengths instead of classifying them as competitors. While lidar relies on the principles of light to characterize the physical attributes of an object, radar primarily uses radio frequency energy and is resilient to atmospheric interference. Few pages on the distinction between LiDAR vs. radar will include four options from a single manufacturer, but here at QJKH, we provide a four-sensor capability grid as we understand the question is rarely “should I use Lidars or Radars?” in a generic sense, but rather “should I use Lidars or Radars in this specific lane, dock, cell, or other space?”. Picking the wrong sensor here is the most common and costly mistake, because each one fails differently — so QJKH benchmarks all four against ISO 3691-4 person-detection requirements before recommending one. We’ll break down each factor in the table below:

How LiDAR Works (Light Detection and Ranging)

LiDAR — short for light detection and ranging — operates by emitting a laser pulse and timing the return. With light speed a known constant, the time it takes to return converts to range. Because lidar systems emit tens of thousands to millions of laser pulses per second, they capture 3D data of whatever surrounds them, creating a 3D “point cloud” of any landscape or structure.

LiDAR uses laser light as an active form of remote sensing to detect objects and fix their position in space. The trade-off is that this millimetre precision depends on clean optics: because near-infrared light scatters in dense fog, a LiDAR’s range can drop and create a detection risk just when an outdoor robot needs it, which is why eye-safe Class 1 designs certified under ISO and IEC 60825-1 standards dominate industrial use and why QJKH engineers specify them for shared workspaces.

Each industrial lidar system comprises three components: a laser light source (usually 905 nm or 1550 nm), a scanner that precisely angles and redirects the laser light as it moves across the environment (like a spinning mirror or mems micro-mirror), and a detector that catches reflected light to convert it to digital data and ultimately position and image. Time-of-flight measurements of distance gives lidar millimetre class accuracy. If long distances are required in demanding outdoor environments, the 1550nm laser offers increased pulse power with inherent eye-safety properties.

Lidar stands for light detection and ranging, and lidar systems operate the same way whether they are airborne lidar systems on a drone or fixed lidar devices that use light to range on a loading dock: lidar operates on reflected light, so the shorter the time it takes for a pulse to return, the closer the object. Because lidar provides detailed 3D data, lidar excels where shape matters — lidar can detect a person’s outline, not just their presence, and that lidar data lets autonomous systems classify objects. That is why the applications of lidar span autonomous driving, autonomous cars, self-driving cars, 3D mapping and warehouse safety.

We use that dense point cloud and lidar technology for industrial applications like our industrial lidar sensors for safety and security, autonomous driving, and 3D mapping. Interested in how these industrial LiDAR sensors do it? Check out this explanation of how a 3D LiDAR sensor builds volumetric data instead of flat scan images.

How Radar Works (Radio Detection and Ranging / mm wave)

Radar — radio detection and ranging — operates like LiDAR but uses radio waves rather than light. Radar relies on radio waves to detect objects: it sends radio waves that hit a target and reflect back to the radar unit, then measures both their flight time and any frequency shift. That Doppler shift lets radar report an object’s speed in a single measurement, whereas lidar can’t.

Radar systems use a band of radar wavelengths across the radio frequency spectrum, and because a radio wave is a long electromagnetic wave that penetrates obstacles unlike visible light, longer radar waves see through conditions that blind optical sensing technology. Radar can detect objects and their velocity at once, producing radar data that pairs range with speed for other sensors to use. Typical automotive and industrial radar systems use the 24 GHz and 77 GHz millimeter-wave bands. Radar’s weakness is resolution: because the radio wavelength is long, two objects 30 cm apart can blur into a single return, which is a real problem when a safety function must pick a person out of clutter. That structural limitation is the reason QJKH pairs radar with a certified laser scanner rather than relying on radar alone for person-detection.

Does radar or lidar have a shorter wavelength?

LiDAR has the much shorter wavelength. Light waves in LiDAR are in the ~700-1550 nanometer range, while radio waves used in radar have wavelengths from roughly 0.3-100 cm. This disparity is the origin of almost all of the subsequent differences between the two technologies: short waves “see” small things (LiDAR), while long waves “blast through” the haze (radar). Radar exchanges detail for penetration.

Modern radars are generally frequency-modulated continuous-wave (FMCW) and sweep their radio frequency back and forth to determine both the range and the velocity at a single pulse; this contrasts with earlier pulsed radar simply detecting range and velocity on individual pulses. According to mm wave sensing research compiled by the U.S. National Library of Medicine (PMC), 77GHz Automotive radars can reliably “identify vehicles located 200-250 meters away” (long range is needed). Compared to lidar, radar technology also dominates traffic management, weather forecasting, and environmental monitoring, where range takes precedence over resolution. And unlike sonar technology, which relies on sound waves underwater, or passive sensors like cameras that read ambient light, radar works actively in air through nearly any weather or lighting. Radar sacrifices resolution for reach – which the next section quantifies.

Accuracy & Spatial Resolution, Where LiDAR Pulls Ahead

Is LiDAR more accurate than radar?

Yeah, for shape and position, LiDAR is vastly superior. For example, Industrial LiDAR has a resolution of about 2-10 mm, returns a full point cloud and costs under $5,000 for an adequate model, whereas mm wave radar returns the speed of objects (but not shape, at least not reliably or very precisely) to maybe 50-200 mm with over a hundred times the form factor and price.

This isn’t a configuration issue, it’s a physics limitation. Radar’s large wavelengths and small apertures are unable to separate points closely spaced in any dimension except their travel time (the return trip).

This is our “Cross-Section Illusion.” Radar confidently says that at the five-meter depth of field, something has roughly 1 m² in radar cross-section, but it can’t distinguish a human’s leg from a pallet edge at that same range. The system “knows” something is there but sees it in the wrong shape. Such limitations can feel painful for researchers, and they’re one of the main motivations for efforts that teach machine-learning systems to upsample radar images to a LiDAR-style point cloud — this is the kind of work that Duke’s RadCloud framework is designed to enable, since raw radar isn’t as high resolution as the scan lines of a laser.

Detection Range & Field of View

In a sense, radar penetrates the farthest – Industrial Radar covers a span of roughly 0.2-300 meters while the range of a LiDAR product falls from 0.1 to 200 meters; even longer, in fact, for some dedicated long-range surveillance RADAR products. However, range isn’t often the limiting factor indoors. Field of view is. A single 270-degree safety laser scanner covers an entire corner of the mobile robot path, where a 60-120 degree RADAR node must have siblings to cover the same area. The gap matters because every blind wedge between narrow radar cones is a place where an AGV can clip a pallet or a person, so integrators either add nodes or accept the risk. In a busy three-aisle pick zone, one 270° scanner does the job of three 90° radar nodes.

For long-range outdoor perimeter sensing, radar’s reach and weather resilience are very real advantages. For confined indoor angular coverage – by far the most common obstacle avoidance task – LiDAR’s broad field of view generally wins in number of units/zone.

Weather & Environment, Where Radar Wins

Radar’s long radio waves greatly reduce the effects of haze, fog, cloud, rain and dust, making it the fundamental standard for air traffic control and maritime navigation. LiDAR’s near-infrared laser light bounces off the same airborne particles. Both the RAND Corporation classic study on the attenuation of electromagnetic radiation by haze, fog, cloud and rain, and published US military measurements of fog attenuation at millimeter frequencies follow a similar pattern: higher frequency waves lose orders of magnitude more energy to aerosols than lower ones. The practical risk is real — in dense fog a LiDAR’s effective range can collapse exactly when an outdoor AGV most needs to see, because the laser scatters off droplets the radio waves pass through. That is the structural reason QJKH pairs a scanner with mmWave radar in fog-prone yards.

However the popular maxim “radar is always better in bad weather” doesn’t hold up: in light rain or light fog, a 905 nm LiDAR still provides usable data — experienced practitioners in robotics communities report that rain affects it much like a camera, not catastrophically. Only in very dense fog or smoke does the advantage become clear, with laser light losing around 200 dB/km in the most extreme cases. So, the true rule is conditional, not absolute. In practice, an outdoor logistics yard with seasonal fog and 200 m sightlines runs radar as its primary outdoor obstacle detection sensor, while the same operation uses LiDAR for the precise indoor docks — a split QJKH sees across most mixed-environment sites.

Cost & System Integration, The Real Total

Per unit, radar is often lower cost: industrial radar costs generally $200-3,000; industrial LiDAR is $300-5,000. Exact prices depend upon quantity, model and supplier and should be checked with a current quote. Automotive solid-state LiDAR average selling prices fell over 30% between 2023 and 2025 by one market estimate, but unit value shouldn’t be the consideration when designing.

The figure that drives a project is total system cost for the coverage you need. In QJKH deployments, one 270° industrial LiDAR replaces roughly eight ultrasonic obstacle-avoidance sensors, because a single scanner sweeps the whole forward arc that eight fixed ultrasonic cones would otherwise cover. When you include the wiring, controller channels, mounting hardware and system integration time needed for that array, the single LiDAR with a higher list price often results in a lower installed cost — a lower-priced sensor that requires eight mounts is not a net saving. The trade-off only flips outdoors, where a machine shop or yard fighting dust may still need radar.

Take a full picture before you make decisions about unit price alone – our LiDAR ROI estimator calculates the installed price across sensor quantities, and solid state LiDAR doesn’t have moving parts that rack up maintenance expenses.

Use-Case Fit, The Geometry-or-Velocity Decision Map

Which is better for obstacle detection, LiDAR or radar?

For most indoor industrial obstacle detection, LiDAR is the better primary sensor because the safety question is geometric: exactly where is the person, the rack, the load edge. Radar becomes the better choice when the environment defeats optics — dust, glare, dense fog — or when velocity is the real decision variable. The Geometry-or-Velocity Decision Map below routes the common industrial scenarios.

The field results mirror the map. At a 40,000 m² port distribution centre, updating an AGV fleet to LiDAR zone gating reduced false-positive emergency stops by 87% (from 4.2 to 0.5 stops per 8-hour shift across 25 days of data) because the point cloud could tell an actual personnel intrusion from a fleeting shadow. A container port crane anti-collision system recorded no near misses across 14 months when updated from ultrasonic sensing, with each prevented incident equivalent to $120,000. Work-in-process inventory and production efficiency has also been raised as work in a cobot cell increased from 62 to 91% of its capacity thanks to LiDAR zones enabling human and robot to co-locate safely and closely, without irritating shutdown.

“Buyers ask whether radar or LiDAR is ‘better,’ but on the floor the question is always geometry or velocity. If the safety case depends on knowing exactly where a person is, we specify a LiDAR scanner. If it depends on how fast something is closing across an open yard, radar earns its place, and in fog we run both.”

For crane-related guidance, see overhead crane LiDAR; for tight indoor footprints, a 2D LiDAR sensor handles single-plane protective fields efficiently.

When to Combine Both, LiDAR + Radar Sensor Fusion

Combine LiDAR and radar when no single sensor covers every condition the application throws at it. Use fusion for outdoor AGVs, yard automation, and dock or crane work where fog, dust, or rain can blind a laser scanner but a 77 GHz radar still reports range and velocity. LiDAR supplies the certified shape and person-detection; radar adds the all-weather speed backup.

Can LiDAR and radar be used together?

Yes – and the common solution for all-condition coverage is often to marry them. Rather than being rivals, radar and LiDAR are complementary: sensor fusion pairs LiDAR’s shape and category data with radar’s speed and environmental immunity, so the system keep a usable picture when either sensor alone would fail.

There’s plenty of prior art in patent literature on this topic, for instance, a United States patent for a camera-radar fusion sensor system (US10852419B2) and a long-range steerable LiDAR system (US9880263B2) based on time of flight detection technology.

A handy industrial one-two, used in practice on outdoor AGV and yard applications, is to place the LiDAR scanner in the primary guard for accurate person-detection and mount the 77 GHz mm wave radar on the front for both velocity and an inclement-weather backup. This all has compliance significance: With an “active sensing” regulation – the sort defined in IEC 61496 – the protective product itself has to sense a person and come to rest in a safe state, which demands the known and predictable geometry of a laser scanner. Radar complements but generally can’t replace a certified safety scanner. The risk of skipping the pairing is concrete: a fog-blinded LiDAR with no radar backup can miss a moving forklift, so QJKH engineers a LiDAR-plus-mmWave pair for outdoor fleets because each sensor covers the other’s failure mode.

Industry Outlook, What’s Changing in 2026

The most compelling case to revisit your sensor strategy now isn’t marketing, it’s regulatory. The 2023 edition of ISO 3691-4, the AGV/AMR safety standard, defines person-detection safety functions using standardized performance levels. Commissioning driverless trucks in 2026? Better make sure your obstacle-detectors conform to that 2023 edition. That means buying certified active opto-electronic scanners, aka LIDAR-class, instead of just a handful of tacked-on radars.

To be fair, at the higher end, LIDAR and radar boundaries have blurred in recent years. 4D imaging radar provides vertical resolution and a crude shape profile; FMCW LIDAR offers instantaneous per-point velocities. It’s a story of two technologies adopting one another’s unique advantages. Radars are finding significant application in mobile robotics where LIDAR and vision fall short (according to coverage from the Robot Report), and sophisticated radars are narrowing the performance gap with LIDAR. Meanwhile, falling costs for LIDAR due to high volume in China are accelerating a push toward LIDAR-centric fusion of sensory information. While 4D radar and FMCW LIDAR forecasts predict steep growth curves for the coming years, focus less on the sales figures and more on what the end user is facing: tighter performance standards and lower installation costs for LIDAR-based safety.

Frequently Asked Questions

Knowing how to wire a safety relay is mostly a matter of four terminal groups, power, inputs, reset, and outputs, landed so the device monitor your safety input and drops the machine to a safe state on any fault. In short, it comes down to four things: getting power to the right terminals, landing your safety device on the input channels, wiring the reset, and closing the feedback loop on the output side. A safety relay isn’t a normal relay with a label, it’s a self-checking device built around two redundant internal relays that drop the machine to a safe state when anything fails. Get the wiring right and you’ve a circuit that catches its own faults; get it wrong and you’ve a single point of failure hiding behind a green light.

Updated June 2026 · Reviewed by the CCH Sensing technical team

What a Safety Relay Actually Does Before You Wire It

A safety relay watches a safety device, an emergency stop button, an interlock switch, a safety light curtainand forces connected machinery into a safe state when that device open or when the relay detects a fault inside itself. The “magic” lives in two internal relays, usually labeled K1 and K2, wired in redundancy with force-guided (positive-guided) contacts.

Redundant means the safety function runs through both K1 and K2, two redundant relays inside one housing; if one fails, the other still de-energizes the output. Force-guided means the normally open and normally closed contacts in each internal relay are mechanically tied, so a welded contact cannot lie about its state, the relay sees the disagreement and refuses to reset. This self-monitoring is exactly what regular relays cannot do, and it is the fault behavior that ISO 13849-1 targets, a single welded contact in an ordinary electromechanical relay can leave a machine running when it should be stopped. That difference is the whole basis of relay based safety circuits.

“The mistake we see most often on the bench isn’t a wrong wire, it’s treating the safety relay like an ice cube relay. People wire one channel, skip the feedback loop, and assume the green LED means they’re protected. The whole point of K1 and K2 is that the device proves itself safe on every cycle, not just the first one.”

Application Engineer, CCH Sensing

On our own bench, when we deliberately weld an output contactor on a CCH safety relay module and then call for a restart, the monitored feedback path holds the relay off, the circuit will not energize again until the fault is cleared. That behavior is the dividing line between a real safety device and a relay that merely looks like one. On a robotic weld cell we audited, that distinction is exactly why CCH Sensing engineers rate these modules to ISO 13849-1 PL e, because the relay must prove itself safe every cycle, not just at install. If you want the full comparison, see our breakdown of a safety relay vs a standard relay.

Do You Actually Need a Safety Relay?

You need a safety relay whenever a risk assessment assigns a safety function a Performance Level that demands single-fault tolerance, Category 3 or 4 under ISO 13849-1:2023. At that point a plain relay or a single PLC input is no longer control-reliable, and only a dedicated safety relay or safety controller can deliver the redundancy the standard requires.

The Performance Level (PLr) itself is derived from severity, frequency of exposure, and possibility of avoidance; the equivalent metric under IEC 62061 is the Safety Integrity Level (SIL). That rating drives the Category you must build, so pin down these safety requirements before you choose hardware. In practice, CCH Sensing engineers map the risk assessment to a Category first, an in-house discipline built on years of OEM machine-safety projects.

When Can I Skip a Safety Relay?

You can skip a safety relay when the risk assessment lands at a low Performance Level and a stop failure couldn’t injure anyone, a conveyor that merely halts product with no operator reach-in is the classic example. Below Category 2, a standard relay or a single PLC input may satisfy the requirement, so the cost of a safety relay buy you nothing.

The moment a function needs Category 3 or 4 behavior, where a single fault must not cause loss of the safety function, that plain relay or PLC input is no longer control-reliable. General machine-guarding duty under OSHA 1910.212, and power-press control reliability under OSHA 1910.217, are the kinds of obligations that push a function toward a dedicated safety relay. Not sure where your function lands? Run the numbers with our PL/SIL category mapper or read the risk-based safety selection guide.

The 4-Terminal-Group Map: Decode Any Wiring Diagram

Every safety relay wiring diagram, regardless of brand, breaks into four functional groups. Learn the groups and you can read a Pilz PNOZ, an Allen-Bradley GuardMaster MSR, or a Siemens 3SK terminal block, and most published wiring examples, without memorizing part numbers. We call this the 4-Terminal-Group Map.

A practical note on naming: output contacts are remarkably consistent across vendors, 13-14, 23-24 and 33-34 are normally open safety contacts and 41-42 is the normally closed auxiliary, a pattern confirmed across countless field diagrams. Input terminals vary more. On an Allen-Bradley dual-input relay, S11 and S21 send the test signal out and S12 and S22 receive it back, so the safety device sits between them. Always confirm the input convention on the datasheet before you land a single wire. In practice, the most common field mistake we see at CCH Sensing is a wire landed on the wrong input pair because a technician assumed one brand’s numbering applied to another, a five-minute error that only fails the validation test hours later. Group thinking prevents it, which is the reason ISO 13849-1 documentation starts from function, not part number.

How to Wire a Safety Relay, Step by Step

With the four terminal groups understood, the procedure is repeatable on almost any module. Wire a safety relay in seven steps: isolate power, energize A1/A2, land the safety device on the input channels, set the operating mode, wire the reset, connect the outputs to two contactors, then close the feedback loop and validate. This is the 7-Step Safety Relay Wiring Sequence we use as a bench checklist.

How Are Safety Relays Wired?

Safety relays are wired in pairs and in series: the safety device’s two channels land on the input terminals, the relay’s two redundant outputs drive two contactors, and the contactors’ mirror contacts return to the feedback terminals. Every safe path is doubled, so a single fault is always caught. The seven steps below put that structure into practice.

Notice that the safety relay sits in the middle of the circuit: a safety input on one side, a monitored output on the other, and a reset that ties them together. That structure is identical whether you are wiring a guard interlock or a full machine guarding system. For the broader product context, our safety relay modules page and the safety relay modules guide cover module selection. On a typical production line retrofit, CCH Sensing engineers run this exact sequence because skipping step 7, the feedback loop, is the one failure that passes a first power-up yet fails an ISO 13849-1 validation later; budget roughly 20–30 min per safety function for wiring and test.

Single-Channel vs Dual-Channel Input Wiring

Your single biggest wiring decision is how many input channels to run. A single-channel input runs the safety device through one circuit; a dual-channel input runs it through two independent circuits wired in series, both of which must be closed for the relay to give an output. Dual-channel wiring is what lets the relay detect a cross-fault or a single broken wire, the foundation of Category 3 and 4 behavior under ISO 13849-1.

In practice almost every guarded machine uses dual-channel input. Two normally closed contacts of an e-stop are wired so that pressing the button open both circuits at once; if only one opens, the relay flags a channel discrepancy and won’t reset. That’s the redundant input working exactly as intended. The mistake that bites integrators is running dual-channel wire but powering both channels from one source, which defeats cross-fault detection; CCH Sensing flags this in every customer audit because it quietly drops a Category 3 design back to Category 1, and the relay can only catch the discrepancy inside its simultaneity window of about 0.5 sec.

Wiring the Reset: Manual, Monitored and Automatic

Reset wiring is where good circuits and dangerous shortcuts diverge. There are three options, and the choice is governed by the standard, not by convenience. Use the Channel-and-Reset Decision Grid to match the wiring to the application.

Why does this matter so much? Because ISO 13850:2015 requires that resetting the emergency-stop function must not, by itself, restart the machine. A monitored manual reset satisfies this by detecting the falling edge when the button is released, a shorted or jammed reset button cannot fake a reset. In practice, CCH Sensing defaults guarded-zone designs to monitored reset, an in-house rule shaped by years of field retrofits. Field engineers learn this the hard way: setting every relay to automatic reset “to save a button” is a classic mistake that quietly removes restart protection.

Wiring the Output Side: Contactors, Feedback and the Welded-Contactor Trap

A safety relay’s output contacts are signal-rated, not motor-rated. They’re designed to switch the coils of two external contactors, which in turn switch the motor. Most relays give you two or three independent contact sets for exactly this reason. This is the Welded-Contactor Feedback Trap: the failure most beginners never plan for.

Should Safety Relay Contacts Switch 3-Phase Power Directly?

No. Never run motor current through the relay’s output contacts. Use the safety outputs (13-14 and 23-24) to drive the coils of two contactors, call them KM1 and KM2, and let those contactors switch the three-phase load. Two contactors, not one, so that a single welded set still leaves a second device to break the circuit.

What Happens If a Motor Contactor Welds Closed?

With the feedback loop wired, a welded contactor is caught on the next demand: the relay see the disagreement between commanded and actual contactor state and stays off. Without the loop, the welded contactor keep feeding the motor and the operator has no warning, because the green light is still on. That’s why external device monitoring isn’t optional on Category 3/4 circuits.

On a press brake we serviced, a single welded contactor had been feeding the ram for weeks behind a green light because nobody wired the feedback loop; CCH Sensing engineers now treat EDM as mandatory on every PL d or higher build under ISO 13849-1a rule earned in the field, on our in-house test bench and across years of OEM commissioning. Mirror the fault to a PLC output or indicator if you want maintenance to see it, but keep that signal out of the safety path.

Worked Example: Wiring an E-Stop Through a Safety Relay

Here’s the whole circuit, terminal by terminal, for a dual-channel emergency stop driving a motor through two contactors, the most common safety relay wiring you’ll build. It’s the exact circuit CCH Sensing wires on the in-house bench for OEM customers, because a concrete worked example beats a generic diagram every time; years of panel builds have made it our default e-stop template.

• ✔ Power:24 V DC to A1, 0 V to A2.
• ✔ Channel 1:first normally closed contact of the e-stop between S11 and S12.
• ✔ Channel 2:second normally closed contact of the e-stop between S21 and S22.
• ✔ Reset + feedback:reset button plus the series mirror contacts of KM1 and KM2 across S33–S34.
• ✔ Outputs:13-14 to the KM1 coil, 23-24 to the KM2 coil.
• ✔ Load:KM1 and KM2 main contacts in series feed the three-phase motor.
• ✔ Status:41-42 (NC) to a PLC input for indication only, never as the safety path.

Press the e-stop and both channels open, K1 and K2 drop, both contactors release, and the motor stops. Release and reset, and the relay re-enables only if the feedback loop confirms both contactors have actually opened. This circuit aligns with ISO 13850:2015 for the e-stop function and with the electrical practices in IEC 60204-1 for the machine wiring.

Testing, Commissioning and Troubleshooting

How Do You Test a Safety Relay?

Validation is part of the wiring job, not an afterthought. Work through each safety function in turn: trigger the device, confirm the outputs drop, then confirm the machine actually stop. A safety relay monitor its channels continuously, so the relay’s diagnostic LEDs are your first read on what it sees.

• ✔ Operate each safety input and verify both channels respond, a single-channel response means a fault or miswire.
• ✔ Confirm the output contacts open and the contactors release on every demand.
• ✔ Simulate a welded contactor by holding a mirror contact open; the relay should refuse to reset.
• ✔ Read the LED fault codes against the manual to localize cross-faults and channel discrepancies.

Common faults a safety relay detects and reports include a cross-fault between the two input channels, a welded output contact, a channel discrepancy (one input closed while the other is open), and a simultaneity timeout when the two channels do not change state within the allowed window. Each of these is a wiring story as much as a device story, most “the relay won’t reset” calls trace back to a feedback loop that was never closed. In the field, CCH Sensing engineers budget a full functional test per safety function because an untested channel is the root cause of most “it worked on Monday” failures; on the bench we deliberately fault each channel to confirm the relay reacts inside its rated response time and logs the fault per ISO 13849-1.

Industry Outlook: From Discrete Relays to Configurable Safety

Those wiring fundamentals above are stable, terminal groups, dual-channel inputs and external device monitoring haven’t changed and won’t. What’s changing is the architecture you choose before you pick up a wire. As the number of safety functions on a line grows, point-to-point discrete relay wiring becomes the expensive part to install and, worse, to modify later. For any new build, the practical judgment is to decide between discrete relays and a configurable platform up front, because re-pulling wire after commissioning costs far more than choosing correctly on paper.

Two shifts drive that decision. Configurable safety relays, safety controllers and safety PLCs replace a stack of single-function relays with one software-defined device, trading wiring for configuration and turning a hard-wired safety system into a programmable one. And IO-Link Safety (standardized as IEC 61139-2 and now offered by Pilz, Phoenix Contact and SICK among others) carries safe and standard signals over a single cable to field devices, enabling distributed safety that cuts the point-to-point runs which dominate a traditional safety circuit. For a low-function machine, a discrete safety relay is still the cheapest, most transparent choice. For a line with a dozen interlocks and zones, increasingly the norm, the wiring savings tip toward configurable safety. On multi-zone lines we commission, the trade-off is concrete: a dozen discrete relays can mean hundreds of wired terminals, which is the reason CCH Sensing increasingly specs configurable safety for OEM builds with more than roughly 6 safety functions, because the wiring labor saved outpaces the higher unit cost, and ISO 13849-1 applies either way. Market analysts project steady growth in functional-safety hardware through the decade, but that figure is background; the decision that affects your panel is architecture-before-wire, not the size of the market.

Frequently Asked Questions

Safety laser scanner vs light curtain is the machine-guarding choice between area sensing and point-of-operation sensing, and it comes down to one practical question an operator faces at the press, robot cell, or floor: do you need fast, high-resolution finger protection right at the point of operation, or multi-meter area monitoring across, say, three machine frames or 50 meters of AGV track? Both are optical presence sensing safety devices that stop machinery before a person reaches a hazard, but the safety space they protect takes two very different forms. This guide compares a light curtain and a laser scanner on detection method, Type and SIL rating, resolution, safe distance, and five-year cost, so you can pick the right one for your press or conclude that both belong in the best safety solution.

Safety Laser Scanner vs Light Curtain: The Quick Answer

A safety light curtain protects a fixed detection plane at the point of operation and reaches Type 4 / SIL 3 for finger-to-body protection; a safety laser scanner protects a configurable two-dimensional area or floor zone at Type 3 / SIL 2, which suits AGVs, robot cells and large perimeter monitoring. In short: the light curtain wins where a worker reaches into a machine, and the laser scanner wins where a worker walks around it. Most plants end up using both, and a single safety relay module can process the stop signal from either device.

The numbers; the standards; an ISO 13855 safe-distance calculation you can run yourself; and a four-question selector to make the call.

Getting this wrong is an expensive mistake: an under-rated device can fail a safety audit, while an over-specified scanner wastes budget on a 14 mm finger hazard a curtain already covers. Because QJKH engineers both the ENT curtain and the SH scanner to IEC 61496, our certified production team sizes the decision to the press or robot cell in front of you, not the brochure.

How Each Device Detects: Detection Plane vs Scanning Field

The fundamental difference is geometry, and it is worth naming. We call it the Plane vs. Field Coverage Model: a light curtain protects a plane, while a laser scanner protects a field. A curtain places a transmitter and receiver on either side of an opening, whereas a scanner sits in one corner and sweeps the floor, and that single structural difference drives almost everything else in this comparison.

A safety light curtain is formed from a transmitter and a receiver that face each other and emit a vertical or horizontal series of infrared light beams. If any opaque object blocks one beam, then the receiver drops the signal and the device outputs an immediate stop signal. Since the spacing of the beams is fixed, the curtain has no concept of shape or position of what’s moving through it; it only knows that there’s an intrusion, which it then responds very quickly in a binary way.

A safety laser scanner operates time-of-flight. A pulsing laser beam is projected by a scanning mirror, it sweeps up to 270°, and times the reflection to measure distance. The scanner has no separate receiver; unlike a curtain it does not need an opposing unit, it ‘reads’ reflection off ambient space. Software defines selectable protection and warning areas so, the same scanner may cover an awkward region, trigger warning on another region then command stoppage when an object encroaches the inner area. US9423499B2 describes a safe object-detection and output-evaluation method, and US11624823B2 cover how a scanner monitors its own operation to guarantee safe use when contamination occurs.

What is the difference between an area sensor and a light curtain?

An area sensor-otherwise a safety scanner, safety laser scanner or area scanner- measures a two dimensional area and responds to presence within an area setting. A light curtain only detects whether an object breaks a plane of beams. In other words, an area scanner measures space around a machine; a curtain draws a trip line. That’s why scanners protect floors of robots while curtains protect press openings.

The reason this matters is structural: because the curtain plane is fixed, it cannot follow a moving robot or AGV, and that trade-off is the root cause of the entire comparison. A scanner reads reflected light over several meters, so it tolerates a layout change a 1,827 mm curtain cannot, per IEC 61496-3.

Safety Classification: Type 4 / SIL 3 Curtain vs Type 3 / SIL 2 Scanner

Here’s the point that’s the source of almost every decision making error, and it can be plainly stated – as the “Type Ceiling Rule,” – no scanner of type 3/SIL2/PLd/category 3, however sophisticated, can serve as a replacement for type 4 / SIL3 / PLe / category 4 light curtains at a points of highest risk. The slogan which “safety laser scanners are displacing light curtains” does hold up regarding areas and peripheries of guarding-but only at those locations. It doesn’t apply where the higher Type 4 security must be used – point-of-operation finger and other areas.

The Type classes emanate from the IEC 61496 family of electro-sensitive protective equipment (ESPE) standards. Light curtains are active opto-electronic protective devices (AOPDs) under Type 2 or 4. Laser scanners are active opto-electronic protective devices responsive to diffuse reflection (AOPDDR), classified Type 3. In the 2025 edition, the detection-capability and fault-detection minimums for Type 3 devices were raised in IEC 61496-3. Their maximum reach for performance level (PL) and safety integrity level (SIL) are given by ISO 13849-1 and IEC 62061, respectively. As is readily asserted by Datasensing (which builds both), a scanner reaches PLd, but a Type 2 curtain only PLc (though Type 4 achieves PLe).

“Treat the Type rating as a ceiling, not a preference. We size every quote to the risk assessment first: if the hazard is a power press where hands enter the die space, the answer is a Type 4 curtain, full stop. The scanner earns its place around the cell, not at the nip point.”

QJKH Functional Safety Engineering Team

Detection Capability and Resolution Compared

Resolution divides device applicability by body parts. It’s the single best separating feature between the technologies. With 14 mm beams, a Type 4 light curtain will stop a finger, 30 mm a hand, 40 mm a body. Viewing height spans from just 160 mm (on small units) up to a meter or more (e.g., 1800 mm+ for whole body monitoring). Because it’s triggered as soon as even one beam is blocked, close proximity to the hazard is feasible while holding guarded opening sizes to the bare minimum.

In contrast, a laser scanner prioritizes reach over resolution. The smallest object a scanner can typically detect is in the 70 mm range (leg-guarding for floor zone), but extend the detection out to several meters (e.g., a 5.5 meter danger field, and 20 meter warning field). A scanner won’t notice a finger, but it may observe an entire zone around an automaton, alter its protective zone shape as the device shifts tasks, and ignore persistent background intrusions like a forklift truck’s path. For monitoring a vast and irregular hazard zone for entire bodies (or even teams of workers), this area coverage is a benefit that curtains can’t offer.

Mis-specifying 14 mm finger versus 30 mm hand resolution is a common and costly mistake, because the wrong beam spacing either fails to protect fingers at the point of operation or trips on a forearm in production. QJKH holds finger resolution to a 14 mm tolerance for exactly this reason, in line with ISO 13855.

The resolution-to-safety-distance relationship for both devices is defined in ISO 13855.

Head-to-Head Specification Comparison

Here’s the full side-by-side – our 12-Row Scanner-vs-Curtain Spec Table. Use it to shortlist before you read the application section.

Read the table as a set of trade-offs, not a winner: the curtain’s 14 mm resolution is the reason it wins the press, while the scanner’s 270° field is the reason it wins the cell. Because QJKH builds and certifies both, the comparison is honest rather than a single-product pitch, and every number is cross-checked to CE and IEC 61496 datasheets.

The scanner’s time-of-flight detection method is documented in US patent US9423499B2.

Which One Fits Your Application?

The choice is driven by where the hazard is and whether anything moves. The scenario-to-device map below covers the most common cases in machinery, robotics and automation. As a working rule, fixed access points and point-of-operation hazards call for a light curtain, while open floors, robot-cell perimeters and moving platforms make the laser scanner the better choice; on many lines both safety sensors run together.

Press shop. On a stamping line, an operator hand-feeds blanks into a hydraulic press every few seconds. Here a 14 mm Type 4 curtain mounted at the operator station detects finger entry and stops the ram within milliseconds, while muting lets the finished part exit on the outfeed without a false stop. A scanner can’t see the finger and its 60-134 ms response would force the curtain plane far back – the curtain is the only correct choice to protect workers at this point of operation.

Robot weld cell. A robotic welding cell throws sparks and moves unpredictably, so the hazard is the whole floor area, not a single opening. A laser scanner mounted at a corner watches the approach zone, slows the robot when someone enters the warning zone, and stops it in the protected zone – then resumes automatically once the area clears, avoiding a manual restart. A curtain at the cell entrance can supplement it for access guarding.Robot cell safeguarding usually layers both.

AGV aisle. In an automated warehouse, an AGV travels shared aisles where people walk. A scanner mounted low on the front of the vehicle scans the ground plane ahead, reducing speed in the outer field and stopping before contact in the inner field as objects enter its path. This is the textbook job for a scanner and a fixed curtain simply can’t ride along – see AGV safety for layout guidance.

Where are safety laser scanners typically used?

Safety laser scanners are used wherever the protected zone is an area rather than a line: around robot cells, on AGVs and autonomous mobile robots, at the perimeter of automated warehouses, and on large machines where a person can stand inside the hazardous area. Their configurable zones and several-meter reach make them the default for mobile robotics and area guarding, which is also why EN 1525 leans on them for driverless industrial trucks.

The common mistake here is forcing one device onto every hazard, because a fixed curtain plane cannot ride an AGV and a 70 mm scanner cannot guard a press nip. In practice on a hydraulic press or a robot cell, matching the device to the risk — not to habit — is the difference between a clean audit and an exposed operator, which is why QJKH application engineers start from EN ISO 3691-4 and the risk assessment.

Calculating Minimum Safety Distance (ISO 13855)

Both devices share one formula for safe distance, and running it yourself is the fastest way to feel the difference between them. ISO 13855 gives the minimum distance from the hazard as:

S = K•T+C where S is the minimum safe distance (mm), K is the approach speed (2,000 mm/s for hand/arm movement up to 500 mm), T is the total stop time of the whole safety system, and C is the intrusion distance that depends on detection capability.

Light curtain, worked. For a 14 mm finger-resolution curtain, the intrusion term is C = 8 • (d 14) = 8 • (14 – 14) = 0 mm. If the curtain plus machine total stop time T is 0.2 s, then S = 2,000 • 0.2 + 0 = 400 mm. Swap to a 30 mm hand-resolution curtain and C = 8 • (30 – 14) = 128 mm, so S = 400 + 128 = 528 mm. Finer resolution lets you mount closer and save floor space.

Laser scanner, it worked. For a horizontal floor zone the standard typically uses a walking algorithm and adds a height term: S = (1,600 T) + 1,200 0.4 H, and then allows for a measurement uncertainty Z for the scanner. For T = 0.2s and H = 300 mm mounting height, S = 320 + 1,200*120 = 1,400mm, and adding the 100mm or so measurement uncertainty brings you into 1,500 mm. The slower speed and larger intrusion term are what drive much higher standoff for a scanner compared to a curtain – fine around a cell, terrible at a press.

Skipping this calculation is one of the most expensive mistakes in machine guarding, because mounting inside the safe distance leaves the hazard exposed even when the device reads OK and passes a quick check. The 400 mm curtain result and the roughly 1,500 mm scanner result above are not interchangeable; QJKH runs the ISO 13855 numbers against your measured stop time before quoting a mounting position.

These approach-speed calculations are governed by ISO 13855, with point-of-operation duties set by OSHA 29 CFR 1910.217.

Total Cost of Ownership Over 5 Years

Sticker Price isn’t the big number. We generally break real costs down by this 5-Layer Cost-of-Ownership Stack:

As a generalization, there’s a low device cost and low system setup for the Light Curtain, it tends to be simple tomaintain, and that’s the reason the Curtain is often the lowest cost to procure and implement for Fixed Point-Of-Operation safeguarding and for cost sensitive applications. On the other side, the laser scanner tends to have the highest up-front cost and the longest integration time, but pays off quickly when retooling times and production changeover times are high. these positions aren’t firm figures- inquire for a quote that include machine setup, duty cycle, etc. so we can discuss device price lists that move around.

The hidden cost is downtime: a scanner that nuisance-trips on a reflective pallet can lose more in production than the device costs, because false stops compound across a 5-year life and a tuned zone set can cut them sharply. Because QJKH builds both, our engineers tune the zones and the 70 mm detection limit to the line rather than over-selling the more expensive option.

The underlying guarding obligation that drives these lifecycle costs traces back to OSHA machine-guarding standards.

Limitations, Failure Modes and Common Field Mistakes

We tend to observe these 6 errors from the field, whenever an team must decide between these systems:

• – A finger beam on a press a standard type 3 scanner can’t satisfy point-of-operation: that’s The Type Ceiling Rule.
• – Reach over or round bypass. This is a vertical plane that an operator must work through. They’ve achieved correct placement. But a human can just step over or around the safety plane.
• – Placed too Close. Simply not running the ISO 13855 (above) means the operator comes inside the safety zone.
• – Bypassing Muting. Muting requires distinction between product and people. Defeating it’s like open the gate and leaving it unattended.
• – Don’t Include the Whole Stop Stack. We need to look beyond just device response and also the PLC and the final machine stop time in “T.”
• – Shining Floors causing “nuisance” stops for laser scanners. Shiny or Wet floors, and pallets can reflect the beam creating trips that are only the cause of inconvenience, rather than safety on some occasions.

In practice on a foundry press line or a woodworking cell, dust, steam and reflective surfaces are the real limit on a scanner, while a curtain’s 14 mm plane is defeated by reach-over if mounted without a standing-surface check. QJKH validates these failure modes in-house before shipping, because a missed mistake here is a missed injury.

Scanner optical-window self-monitoring against the dust and contamination failure mode is covered in US patent US11624823B2.

How to Choose: The 4-Question Selector

When an urgent situation demands a quick decision, run the 4-Question Scanner-or-Curtain Selector. It resolves most cases in under a minute, routing finger and hand point-of-operation hazards to a light curtain, area and floor hazards to a laser scanner, mobile platforms to a scanner, and combined perimeter-plus-access needs to a layered system.

Layered makes sense. Area scan often provides peripheral zone coverage around a robot cells and then a light curtain provide flat plane coverage across an entry. Both are wired to safety relays. If pressure sensitive safety mats are an option you can then refer our three-way comparison of light curtains, laser scanners and safety mats. Our Type 2 vs Type 4 selection guide helps you choose the curtain Type appropriate to the safety level.

In practice on a press brake or an AGV aisle, the wrong answer here is the costliest mistake because it is locked in at install, and a 70 mm scanner cannot be retrofitted into a 14 mm finger duty. Confirm the call against your risk assessment and EN ISO 3691-4 for mobile platforms; QJKH engineers will sanity-check the layout before you commit.

Industry Outlook: Why the Lines Are Blurring

It’s a stretch to say it’s “scanner vs. curtain” today. it’s more that you layering your light curtains and scanners to cover both fixed point-of-operation and moving area hazards. The AGV, AMR, and Collaborative robots are certainly driving the evolution and with them increased need for agile areas detection, as a static light plane doesn’t accommodate mobility, as you will see illustrated by standards updates ISO 3691-4 published in 2023 covering driverless industrial trucks and an update to the IEC 61496-3 specification which tighten coverage requirements in 2025. Don’t forget, Finger protection in a point of operation isn’t changing, that is still firmly the job of light curtains (Specifically Type 4/SIL 3).So the important question to ask your safety vendor isn’t “either/or?” it’s “how do they best pair in my application?.” The safety system you’re installing to integrate these devices should be able to readily support each. For example analysts predict the safety laser scanner market will grow to $0.5 billion by 2025 and beyond so keep this safety technology in your sight, but it shouldn’t be your deciding factor.

The 2023 revision of ISO 3691-4 codifies safety-scanner use on driverless industrial trucks.

Frequently Asked Questions