In the field of modern industrial automation, the integration of safety control and standard control has become an inevitable trend. The PSS 4000 automation system launched by Pilz is a representative product of this trend. It seamlessly integrates security functions (compliant with EN ISO 13849 PL e and EN/IEC 62061 SIL 3) with standard automation functions through a unified hardware platform and software environment, making it particularly suitable for various application scenarios ranging from standalone devices to large networked factories.
This article is aimed at automation engineers and maintenance personnel, providing a detailed technical guide around the four core dimensions of PSS 4000 system composition, network communication, software programming, and common troubleshooting. Whether you are configuring SafetyNET p network for the first time or need to quickly troubleshoot controller communication interruptions, this article can provide practical operational references.
System architecture and core components
1.1 Distributed Control Concept
Traditional automation typically uses a centralized controller: a central PLC processes all input and output signals. The PSS 4000 adopts the concept of distributed consistent control: user programs can be executed in a distributed manner among multiple controllers, while the entire project is still managed in a centralized engineering manner. This means that regardless of which physical controller the program segment is actually running on, its logical relationship is transparent to the programmer. The direct benefits brought by this architecture include:
Hardware selection and programming can be carried out in parallel, and the hardware can be determined later in the project.
When expanding the device, only the program part needs to be migrated to the newly added controller, without rewriting the entire code.
Support local debugging and partial operation to shorten the overall project cycle.
1.2 Controller Series
The PSS 4000 provides controllers with two performance levels:
PSSuniversal PLC - Universal Controller
Suitable for complex and large-scale automated tasks. It can be used as a central PLC or as a distributed node. Supports five programming languages (IL, STL, LD, FBD, SFC) that comply with EN/IEC 61131-3, and is certified as Limited Variability Language (LVL) by T Ü V S ü d for creating safety related user programs. Typical models include PSSu H PLC1 FS SN SD (with dual SafetyNET p interface) and PSSu H PLC1 FS DP SN SD (with SafetyNET p+PROFIBUS-DP slave interface).
PSSuniversal Multi - Small Application Controller
Suitable for standalone or small interconnected devices. It focuses on local security features and can be configured through the graphical editor PASmulti. Supports up to one security task and can connect up to five devices through SafetyNET p. Typical models include PSSu H m F DP SN SD (SafetyNET p+PROFIBUS-DP).
Common characteristics:
Modular bus supports up to 64 I/O modules (mixed safety and standard)
Integrated power supply
Built in SafetyNET p switch function, supporting linear topology
SD card stores project and configuration data for easy device replacement
Safety level: SIL CL 3 (EN/IEC 61508), PL e (EN ISO 13849)
1.3 I/O System
The I/O system of PSS 4000 is divided into two categories:
PSSuniversal I/O (IP20) - Suitable for installation inside control cabinets. The head module can be selected from PLC, multi, or pure I/O types. I/O modules include digital quantities (4DI, 4DO, 16DI, etc.), analog quantities (2AI, 4AO, RTD, TC, etc.), encoder interfaces (SSI, incremental), and special functional modules such as Fast Control Unit (FCU) - built-in high-performance safety logic that can directly map local safety inputs to outputs within 400 µ s for ultra fast cutoff applications.
PSS67 I/O (IP67) - No control cabinet installation. The module has a protection level of IP67 and can be directly installed on the machine, making it suitable for distributed signal acquisition.
Module replacement and expansion: All modules are plugged into the base and can be hot swappable without disconnecting the wiring (following power-off specifications). During subsequent adaptation, simply add or remove modules, and the system will automatically recognize them.

Real time Ethernet SafetyNET p Detailed Explanation
2.1 Core Features
SafetyNET p is the backbone network of PSS 4000, based on the standard Ethernet IEEE 802.3, which simultaneously transmits security related data and non security data. Its security mechanism follows the Black Channel principle: except for security devices, intermediate network components (such as switches) do not need to have security functions, and the security protocol itself encapsulates all mechanisms such as verification, timeout, serial number, etc.
Key Performance:
Safety level: PL e/SIL 3
Supports linear, star, and ring topologies (ring network redundancy MRP)
The cycle time can be as low as microseconds (depending on the number of nodes)
Simultaneously transmitting secure and non secure messages on the same cable without interfering with each other