OSHA's Process Safety Management standard (29 CFR 1910.119) has governed chemical, petrochemical, and oil and gas facilities since 1992. It covers processes involving more than 137 listed highly hazardous chemicals, because the consequences of a failed safety layer are not recoverable.
Any one of these can turn a manageable process excursion into a catastrophic release:
- A pressure relief system that doesn't actuate
- An emergency shutdown that fails to trip
- A safety interlock that degrades silently over time
Safety PLCs, fail-safe I/O modules, and safety relay systems are the last line of defense. When that hardware fails, OEM lead times can run weeks or months. PLC Direct supplies surplus safety PLCs, refurbished safety relays, and SIL-rated automation hardware for facilities that cannot afford to wait.
What Is a Safety PLC, and Why Can't a Standard PLC Substitute?
A safety PLC, also called a fail-safe or F-series controller, is designed and certified to execute safety functions in accordance with IEC 61508, IEC 62061, and ISO 13849.
The distinction from a standard PLC is architectural, not cosmetic:
- Standard PLCs are designed for availability: keeping a process running.
- Safety PLCs are designed for integrity: ensuring that when a safety function is demanded, it executes, and that any internal fault forces a defined safe state.
Safety functions are assigned a Safety Integrity Level (SIL) from SIL 1 through SIL 4, based on the probability of failure on demand. Most process industry applications require SIL 2 or SIL 3.
A standard PLC cannot substitute for a certified safety loop without full revalidation of the safety function.
Where Are Safety PLCs and Safety Relays Required?
Safety instrumented systems (SIS) are required wherever a process hazard analysis identifies risks that basic process control cannot reduce to an acceptable level. That covers a wide range of industries:
- Oil and gas production, refining, and petrochemical processing: emergency shutdown, high-pressure trip, burner management
- Chemical and specialty chemical manufacturing under OSHA PSM (29 CFR 1910.119)
- Power generation: boiler and turbine protection systems
- Pharmaceutical and fine chemical processing with reactive or toxic intermediates
- Mining operations: conveyor fire suppression, hoist protection, electrical substation interlocks
- Water and wastewater treatment: chlorination and chemical dosing systems
Safety relay systems operate at the equipment level. Where a discrete hardwired function, such as an emergency stop, light curtain, or safety gate, needs certified monitoring independent of the main control system, a dedicated safety relay handles it. Safety PLCs manage complex multi-loop safety logic, and safety relays handle individual safety devices. Both are essential; neither replaces the other.
What to Confirm Before Sourcing SIL-Rated Automation Hardware
SIS designs are validated for a specific hardware configuration. Changing components without revalidation can compromise the SIL claim of the entire safety loop.
For maintenance replacement in an existing, validated system, the correct approach is to source the same part number in a compatible hardware configuration. Before ordering:
- Confirm the exact CPU part number and firmware revision against the installed system documentation.
- Verify that fail-safe I/O modules match the channel configuration and SIL rating of the installed units.
- Check lifecycle status for many legacy safety CPUs are in phase-out, and surplus sealed or refurbished stock from an independent supplier can bridge the gap while a platform upgrade is planned.
- Confirm the replacement comes with a warranty covering defects and functionality.
On condition: surplus sealed hardware is factory-sealed stock that has never been placed in service. Refurbished hardware has been inspected, tested, and restored to operational specification. Both are viable for maintenance replacement when verified against the system's bill of materials and the facility's management of change process.
What Safety Hardware Is Available Through PLC Direct?
PLC Direct stocks SIL-rated automation hardware from multiple brands, including safety PLCs and safety relay systems. All hardware purchased from us carries a 1-year PLC Direct warranty covering defects and functionality.
Siemens SIMATIC Fail-Safe Controllers
The SIMATIC S7-300F CPU 317F-2DP (6ES7317-6FF03-0AB0) is confirmed in the PLC Direct collection. It supports Siemens' S7 Distributed Safety software and is certified for SIL 2 and SIL 3 applications. Fail-safe I/O is also stocked, including the SM 326 F-DO digital output module (6ES7326-2BF10-0AB0), rated to Category 4 per EN 954-1 and SIL 3 per IEC 61508.
The S7-300F platform has a large installed base in process industries. Many facilities running these controllers are past the OEM's support period. Sourcing a surplus safety PLC from this range as a spare or direct replacement covers the gap that an OEM channel cannot close on short notice.
Siemens SIRIUS Safety Relays
The SIRIUS 3TK28 series is available across multiple configurations, including relay and electronic enabling circuit variants, 22.5 mm and 45 mm widths, and coil voltages from 24 V DC to 230 V AC. Safety ratings reach up to SIL 3 per IEC 61508 and PL e per ISO 13849-1. Confirmed models include the 3TK2825-1AL20, 3TK2828-1BB40, 3TK2828-2BB40, 3TK2841-1BB40, and 3TK2842-2BB42.
Pilz PNOZ Safety Relays
Pilz PNOZ series safety relays are confirmed in the PLC Direct collection across the PNOZsigma, PNOZ X, PNOZcompact, and PNOZpower families. The PNOZsigma range covers emergency stop, safety gate, and light curtain monitoring in 17.5 mm and 22.5 mm widths, with manual and automatic start configurations. PNOZmulti 2 configurable safety controllers and myPNOZ modular relay systems are also stocked for facilities running more complex safety architectures.
Phoenix Contact PSR Safety Relays
Phoenix Contact PSR series safety relays are available in multiple configurations, covering emergency stop, safety door, light grid, and magnetic switch monitoring, up to SIL 3, Category 4, and PL e per EN ISO 13849. The range includes single- and two-channel operation, screw- and spring-cage-terminal options, and timed-dropout variants with delays from 0.1 s to 300 s.
ABB AC500-S Safety PLCs and Safety Relays
The AC500-S is the safety-rated variant of ABB's AC500 PLC family, certified to IEC 61508. ABB safety relay hardware is also confirmed in the collection. Both are available for lifecycle and maintenance support of installed ABB safety systems.
When Does Sourcing Surplus or Refurbished Safety Hardware Make Sense?
Safety systems in process industries regularly outlive the commercial lifecycle of the hardware they run on.
Siemens SIMATIC S7-300F CPUs have been in phase-out for several years. Thousands of validated S7-300F safety systems are still in active operation at refineries, chemical plants, and power facilities. Migrating to a current-generation platform requires full revalidation, a capital budget cycle, and a planned shutdown. None of which are available when a safety CPU fails unexpectedly.
Sourcing a surplus safety PLC or refurbished safety relay as a direct, in-kind replacement, following the facility's management of change process, keeps the installed system under its existing validation while the longer-term upgrade is planned. This is the operational reality in many hazardous facilities.

