Pilz GmbH & Co. KG

PNOZmulti 2 Modular Safety Controller

Pilz's second-generation configurable safety controller — graphical PNOZmulti Configurator drag-and-drop programming, SIL 3/PLe/Cat. 4 certified, up to 64 expansion modules per base unit, and PNOZsigma fieldbus modules for safe communication without wiring.

SIL 3 / PLeCat. 4Up to 64 ModulesSafe FieldbusGraphical Config
PNOZmulti 2 Base Unit PNOZ m B0 ACTIVE SIL 3 PLe 8 Safe-In / 4 Safe-Out E-Stop · Door · AOPD PNOZsigma Bus USB CFG 24 VDC RUN ERR DIAG OUT PNOZ m EF Safe Input 8 × Safe In Cat. 4 PLe PNOZ m EO Safe Output 4 × Safe Out 4 A each PNOZ m ES PROFIsafe PROFINET PN PROFIsafe F-Device PNOZmulti Configurator E-STOP 1 + 2 DOOR SWITCH LIGHT CURTAIN AND SAFE OUTPUT Muting / Two-Hand SIL 3 Validated
Safety LevelSIL 3 / PLe / Cat. 4
Max Modules64 per base unit
FieldbusPROFIsafe / FSoE / CIP Safety
ProgrammingPNOZmulti Configurator (graphical)
Supply24 V DC

Overview

The Pilz PNOZmulti 2 (PNOZ m B0/B1) is the industry's most widely deployed configurable safety relay system, replacing hundreds of individual hardwired safety relays with a single modular base unit expandable to 64 I/O and function modules. Unlike traditional fixed-function safety relays that require physical rewiring for every safety function change, the PNOZmulti 2 uses Pilz's PNOZmulti Configurator software — a graphical drag-and-drop environment — to define safety logic, monitor inputs, and generate the configuration file that downloads via USB or Ethernet to the base unit. The configuration is TÜV-certified; engineers do not need to code safety logic from scratch for each standard function (E-stop, door monitoring, two-hand control, muting, AOPD).

The PNOZsigma backplane bus connecting all modules achieves a communication cycle time of 1 ms, ensuring that a safety input event on expansion module 64 reaches the base unit CPU within one cycle — a crucial parameter for SIL 3 response time calculations. Safe outputs switch within the base unit's response time specification (8–40 ms depending on model), which engineers document in the safety assessment as the system's contribution to the overall safety function response time.

For integration with process PLCs without hardwired I/O, the PNOZsigma fieldbus modules (PNOZ m ES) carry safe data over PROFIsafe (PROFINET), FSoE (EtherCAT), or CIP Safety (EtherNet/IP) — allowing the S7-1500F or GuardLogix to read safety states and reset commands over the standard fieldbus cable without additional wiring between safety controller and PLC.

Industrial control panel showing the DIN-rail environment where safety controllers like the Pilz PNOZmulti 2 are installed alongside PLCs and I/O
Industrial DIN-rail control panel, typical installation environment for safety controllers.

Key Features

  • Graphical PNOZmulti Configurator — No Safety PLC Programming — Engineers build safety logic from certified function blocks (E-stop, door monitor, muting, two-hand, AOPD, speed monitor) using drag-and-drop. The tool automatically calculates PFHD (probability of dangerous failure per hour) and PL/SIL level — eliminating manual safety integrity calculations for standard machine safety functions. TÜV approval covers each certified function block.
  • Modular Expansion — Up to 64 Modules — A single PNOZ m B0 base unit supports up to 64 snap-on expansion modules via the PNOZsigma backplane bus: input modules (8× safe-in), output modules (4× 4A OSSD), diagnostic modules, and fieldbus gateway modules. No additional wiring — modules click onto the bus rail in minutes. The system scales from a 2-module E-stop monitor to a 64-module machine-wide safety network.
  • Comprehensive Safety Functions — Pre-certified — Supports: Emergency stop (EN ISO 13850); Safety door / interlocking device (ISO 14119); Two-hand control (ISO 13855); Muting (4-sensor, 2-sensor, sequential); AOPD / light curtain (IEC 61496); Speed and standstill monitoring; Safe brake control. All function blocks carry TÜV approval, eliminating re-verification for standard applications.
  • Safe Fieldbus — PROFIsafe / FSoE / CIP Safety — PNOZ m ES modules carry safe data over the machine fieldbus, enabling safe I/O over standard EtherNet/IP or PROFINET cables. The safety PLC (S7-1500F, GuardLogix) reads safe inputs and writes safe outputs without dedicated safety wiring, reducing cable costs and simplifying machine safety architecture on distributed manufacturing cells.

Technical Specifications

Pilz PNOZmulti 2 Key Specifications
ParameterSpecification
Base Unit ModelsPNOZ m B0 (standalone), PNOZ m B1 (with display)
Safety IntegritySIL 3 (IEC 62061), PLe / Cat. 4 (ISO 13849-1)
Onboard Inputs8× safe inputs (2-channel), 2× safe outputs (OSSD)
Max ExpansionUp to 64 modules via PNOZsigma backplane bus
Backplane Bus Cycle1 ms
Response Time8 ms (base) to 40 ms (64 modules, worst case)
PFHD (SIL 3)≤ 1×10⁻⁸ /h (base unit + 2 modules)
Safe Fieldbus OptionsPROFIsafe (PROFINET), FSoE (EtherCAT), CIP Safety (EtherNet/IP)
Configuration ToolPNOZmulti Configurator (free, Windows, drag-and-drop)
Supply Voltage24 V DC (±20%)
Ambient Temperature−10°C to +55°C
Protection ClassIP40 (DIN rail)
StandardsIEC 62061, ISO 13849-1, EN 60947-5-1, UL 508, CE, TÜV Rheinland

Application Areas

  • Machine guarding — access doors, emergency stops, light curtains
  • Robot cell safety — dual-channel enable, reduced speed monitoring
  • Press and stamping machine two-hand control
  • Conveyor muting at loading/unloading stations
  • Safe fieldbus gateway for safety PLC integration
  • Pharmaceutical and food packaging machine safety

Sources & References

  • Pilz GmbH, PNOZmulti 2 Operating Manual FS PN 21.02 (2024)
  • IEC 62061:2021 — Safety of Machinery: Functional Safety of Control Systems
  • ISO 13849-1:2015 — Safety of Machinery: Safety-Related Parts of Control Systems
  • TÜV Rheinland Type Approval for PNOZmulti 2 Base Unit