Learn PLCs free
Programming Guides21 min read4,017 words

Machine Guarding Explained: Types, Requirements, and Safety Devices

Machine guarding explained — fixed, interlocked, and adjustable guards, presence-sensing devices, OSHA/ISO requirements, and how guards tie into the safety system.

PPI
PLC Programming IO Editorial Team
Sourced guidance with documented review and correction standards

Machine guarding is a system of physical barriers, enclosures, and safety devices that prevents people from coming into contact with the hazardous parts of a machine — rotating components, cutting edges, pinch points, and ejected materials — without stopping the machine from doing its job.

A guard is not simply a cover bolted to a frame. Done correctly, machine guarding is an engineered solution that matches the type of hazard, the frequency of access required, and the control architecture of the machine. A fixed enclosure that never needs to be opened calls for a different approach than a loading station where an operator reaches in every cycle.

What Is Machine Guarding?

Machine guarding encompasses any method used to protect workers from the mechanical hazards a machine presents. Those hazards divide broadly into two categories: point of operation hazards (where the machine acts on the workpiece — the blade, the die, the chuck) and power transmission hazards (the shafts, belts, gears, and linkages that deliver energy to the point of operation).

The fundamental principle is separation — keep body parts out of the danger zone while the machine is capable of causing harm. How that separation is achieved depends on the hazard, the task, and the applicable standard. The word "guarding" is therefore an umbrella term that covers both guards (physical barriers) and safeguarding devices (equipment that detects or controls access without necessarily forming a physical barrier).

ISO 12100 Hierarchy of Controls for Machine Hazard Reduction A vertical stack showing the ISO 12100 three-level hierarchy of risk reduction measures: inherently safe design at the top as the preferred approach, safeguarding and protective measures in the middle including guards and presence-sensing devices, and information for use at the bottom as the last resort including warnings, training, and PPE. 1. Inherently Safe Design (Most Preferred) Eliminate the hazard: reduce speed, use lower-force tooling, redesign so human access is not required ISO 12100 Annex B — must be considered and documented before lower-priority measures are applied 2. Safeguarding and Protective Measures Fixed guards, interlocked guards, presence-sensing devices (light curtains, scanners) Guard type selected to match hazard severity, access frequency, and coast-down time | Performance Level (PL) or SIL assigned 3. Information for Use (Last Resort) Warnings, instructions, training, PPE Not a substitute for engineering controls — documented justification required if higher-priority measures were not practicable
ISO 12100 hierarchy of controls: risk reduction must be applied from top to bottom — inherently safe design first, then safeguarding measures, then information for use as a last resort — and the safety file must document why higher-priority measures were not practicable.

The Hazards Machine Guarding Protects Against

Understanding the hazard type drives the guard selection. OSHA and ISO standards both classify mechanical hazards into recognizable categories.

Hazard type Typical source Example injury
Rotating motion Spindles, chucks, pulleys, shafts Entanglement, degloving
In-running nip points Belt-and-pulley, gear mesh, roll pairs Crush, amputation
Reciprocating motion Press rams, injection moulding platens Crush, fracture
Cutting / shearing Band saws, shears, milling cutters Laceration, amputation
Ejected material Grinding sparks, swarf, broken tooling Eye injury, penetrating trauma
Stored energy release Spring-loaded mechanisms, pressure systems Crush, impact

A single machine can present several hazard types simultaneously. A horizontal band saw has a cutting hazard at the blade, rotating nip points where the blade runs over its wheels, and an ejection hazard from a snapped blade. The guarding solution must address all of them.

Machine Guarding Types — Fixed, Interlocked, Adjustable, Self-Adjusting Guards and Safeguarding Devices A horizontal row of five panels showing the four main machine guard types and safeguarding devices: fixed guards permanently attached requiring tools to remove, interlocked guards linked to the safety system via a switch, adjustable guards repositioned manually for different workpiece sizes, self-adjusting guards that move with the workpiece, and safeguarding devices such as light curtains and safety scanners. Fixed Guard Permanently attached Requires tools to remove No interlock Belt/pulley enclosures gearbox covers Most reliable Interlocked Movable panel with safety switch Opens → stop signal to safety relay With/without guard locking Dual-channel OSSD PLd / SIL 2 Adjustable Fixed structure, part repositions No tools needed to adjust Operator-dependent Band saw blade guard drill press arm Lower-order solution Self-Adjusting Moves with workpiece Returns to rest when part clears No operator action needed Table saw guard Woodworking common Safeguarding Devices No physical barrier Light curtain (AOPD) Safety laser scanner Two-hand control Safety mat OSSD dual-channel outputs to safety PLC PLd–PLe / SIL 2–3
Machine guard types and safeguarding devices: fixed guards are the most reliable (no control-system dependency), interlocked guards suit areas requiring routine access, and safeguarding devices such as light curtains and safety scanners protect high-cycle operations where a physical barrier would slow production.

Types of Machine Guards

ISO 14120 — the international standard for guards — defines guard types by how they provide protection and how they interact with the machine's control system. OSHA 29 CFR 1910.212 uses broadly equivalent categories.

Fixed Guards

A fixed guard is a physical enclosure attached to the machine in a way that can only be removed using tools. No interlocks, no sensors — it simply blocks access to the hazard. Fixed guards are the most reliable form of protection because they cannot be inadvertently defeated and they do not depend on any control system to function.

Fixed guards are appropriate when:

  • The guarded area does not require routine access for operation or adjustment.
  • The guard can be sized and positioned to fully enclose the hazard zone.
  • Maintenance access can be planned and performed under lockout/tagout.

Common examples include belt-and-pulley enclosures on the back of a conveyor drive, gear covers on a gearbox, and flywheel guards on a press.

Key requirement: A fixed guard must not be removable without tools, and it must be robust enough to contain ejected materials or withstand foreseeable forces. ISO 14120 specifies minimum distances from the guard opening to the hazard based on body-part reach distances (ISO 13857 safety distances).

Interlocked Guards

An interlocked guard is a movable panel, door, or enclosure fitted with a guard interlocking device — a switch, tongue switch, coded magnetic switch, or locking solenoid — that interacts with the machine's control system. When the guard is opened, the interlocking device sends a signal that prevents or stops hazardous machine motion.

Interlocked guards are used wherever routine access is required: feeding raw material, clearing jams, making adjustments, or performing short-interval maintenance.

There are three subfamilies worth distinguishing:

Interlocking without guard locking: Opening the guard sends a stop signal. The machine can be re-started only after the guard is closed again. This is suitable when the machine stops fast enough (coast-down time is short) that the operator cannot reach the hazard before motion ceases.

Interlocking with guard locking (trapped key or solenoid lock): The guard cannot be opened until the machine has reached a safe state (motion ceased, stored energy dissipated). Used when coast-down time is long enough that a worker could enter a still-moving danger zone. The lock is released either by a time-delay circuit, a zero-speed monitor, or manually via a trapped-key system.

Interlocking with guard locking and control: The safety system monitors both the guard position and the lock status. Opening is only possible after an explicit request signal, and the lock confirmation is part of the safety function feedback loop.

The interlocking switch itself must be selected with the required Performance Level (PL) or SIL in mind. Tongue switches and RFID-coded switches with dual-channel OSSD outputs are common choices for PLd/SIL 2 applications. See functional safety basics for an explanation of how PL and SIL are assigned.

Adjustable Guards

An adjustable guard is a fixed-structure guard with one or more components that can be repositioned — without tools — to accommodate different workpiece sizes or setups. The guard itself remains in place; only part of it moves to allow the workpiece to pass through.

A bandsaw blade guard that slides up to accommodate the thickness of a cut and returns to cover the blade as close to the workpiece as practical is a classic adjustable guard. A drill press chuck guard on a sliding arm is another.

The limitation of adjustable guards is that adjustment depends on the operator. If the guard is not correctly repositioned for each setup, protection may be incomplete. Adjustable guards are generally considered a lower-order solution than fixed or interlocked guards for this reason, and they are most appropriate when fixed or interlocked designs are not practicable.

Self-Adjusting Guards

A self-adjusting guard moves automatically in response to the workpiece, returning to its rest (closed) position as soon as the workpiece clears. Table saw blade guards that pivot upward as the workpiece advances over the table — and drop back down as the cut completes — are the canonical example.

Self-adjusting guards require no operator action and provide protection proportional to workpiece position. Their limitation is that they rely on the workpiece itself to provide protection during the cut, leaving the blade partially exposed during the cutting stroke. They are common on woodworking machinery where a fully enclosing guard would block the workpiece entirely.

Safeguarding Devices

Safeguarding devices do not form a physical barrier. Instead they detect the presence of a person (or body part) in a danger zone, or they require a deliberate two-handed action to initiate a machine cycle. Used alone or in combination with guards, they extend protection to situations where a physical barrier would be impractical.

Light Curtains (AOPD)

An active opto-electronic protective device (AOPD) — commonly called a light curtain — projects an array of parallel infrared beams across the access opening to a hazard zone. If any beam is broken, the device sends a stop signal to the machine's safety system.

Light curtains are well suited to high-cycle press and stamping applications where a guard door would slow production unacceptably. The machine can run continuously; the operator feeds parts through the light curtain field and withdraws before the downstroke.

Key parameters for specifying a light curtain:

  • Resolution (minimum object detection): 14 mm detects fingers; 30 mm detects hands; 40–70 mm detects arms. Match to the closest body part that could be in the field.
  • Safety distance: The curtain must be positioned far enough from the hazard that the machine stops before a hand can reach the danger zone after the beam is broken. ISO 13855 provides the calculation method.
  • OSSD outputs: Safety light curtains have two redundant semiconductor output signal switching device (OSSD) outputs. Both must drop to 0 V on beam interruption. The safety relay or safety PLC monitors both channels; any discrepancy flags a fault.

Safety Laser Scanners (ESPE)

A safety laser scanner emits a rotating laser pulse and builds a 2D map of objects in a configurable protective field. It can detect a person anywhere in an area — not just along a line — making it suitable for robot cell perimeter guarding and AGV (automated guided vehicle) pedestrian detection.

Scanners offer configurable field shapes and multiple zones (warning zone plus stop zone) and can switch between field sets under program control. They are certified to PLd/SIL 2 or PLe/SIL 3 depending on the model and mounting. Safety distance calculation follows ISO 13855 for area scanners.

Two-Hand Control Devices

A two-hand control device requires the operator to press and hold two actuators simultaneously (typically within 0.5 s of each other) to initiate a hazardous machine cycle. Both hands are occupied on the controls and therefore outside the danger zone during the cycle.

Two-hand controls are a point-of-operation safeguarding method for single-operator presses and stamping machines. They are not a substitute for guarding when multiple operators are present, because they only account for the person operating the controls. ISO 13851 specifies the design requirements: anti-repeat, anti-tie-down, and synchronous actuation checks must be implemented.

Safety Mats and Pressure-Sensitive Edges

A safety mat is a pressure-sensitive floor mat placed in the approach to a hazard zone. Standing on the mat generates a signal that stops the machine or prevents a cycle from initiating. Safety mats are used for robot cell access, large press approaches, and anywhere a light curtain cannot be mounted conveniently.

A pressure-sensitive edge or bumper is a similar device fitted to moving machinery (robot arms, powered doors, AGV front edges) that stops motion on contact. Both devices use dual-channel resistive or capacitive sensing elements and connect to a safety relay or safety PLC via monitored inputs.

The Hierarchy of Controls Applied to Machine Hazards

Before selecting a guard type, ISO 12100 (General Principles for Design — Risk Assessment and Risk Reduction) requires applying risk reduction measures in priority order:

  1. Inherently safe design — eliminate the hazard. Reduce speed, use lower-force tooling, redesign the task so human access is not required.
  2. Safeguarding and protective measures — fixed guards, interlocked guards, presence-sensing devices. These are the measures covered in this article.
  3. Information for use — warnings, instructions, training, PPE. Information-for-use measures are the last resort, not the first response.

This hierarchy is not merely advisory. OSHA 29 CFR 1910.212 and ISO 12100 both expect the designer to demonstrate that higher-priority measures were considered and either implemented or found impracticable before relying on lower-priority ones. A safety file or technical file must contain that justification.

OSHA 1910.212 and ISO 14120 Overview

OSHA 29 CFR 1910.212 — General Machine Guarding

OSHA's general machine guarding standard applies to all machinery not covered by a machine-specific standard. Its core requirements are:

  • One or more methods of machine guarding must be used to protect operators and other employees in the machine area from hazards such as those created by point of operation, ingoing nip points, rotating parts, flying chips, and sparks.
  • Guards must be affixed to the machine where possible; where not, they must be secured to prevent displacement.
  • Guards must not create a hazard in themselves (sharp edges, pinch points).
  • Point-of-operation guarding must prevent the operator from having any part of the body in the danger zone during the operating cycle.

OSHA also has machine-specific standards for woodworking machinery (1910.213), abrasive wheel machinery (1910.215), mechanical power presses (1910.217), and forging machinery (1910.218), each of which imposes additional requirements beyond 1910.212.

ISO 14120 — Guards: General Requirements

ISO 14120:2015 is the international standard that defines design and construction requirements for guards. Key provisions include:

  • Guards must withstand the forces and impacts they will encounter in service, including ejected materials and foreseeable misuse.
  • Openings in guards must meet the safety distance requirements of ISO 13857 — the larger the opening, the farther the guard must be from the hazard, because larger openings allow further reach.
  • Interlocking devices used with movable guards must comply with ISO 14119.
  • Guard design must consider cleaning and maintenance access to reduce the temptation to remove or defeat guards during routine tasks.

ISO 14120 works in conjunction with ISO 12100 (risk assessment), ISO 13857 (safety distances), ISO 14119 (interlocking devices), and ISO 13855 (positioning safeguards with respect to approach speeds). ISO 14119 was revised in 2024; use the edition adopted for the project and record any regional or customer-specific requirements.

How Guards Integrate with the Control System

This is where machine guarding moves from mechanical engineering into controls engineering — and where errors in implementation cause real accidents.

Interlock Switch to Safety Relay or Safety PLC

An interlocked guard switch is a safety-rated input device. Connecting it to a standard digital input on a conventional PLC is not adequate for any guard that is part of a safety function, because a standard PLC does not provide the diagnostic coverage, response time guarantees, or redundancy required by ISO 13849 or IEC 62061.

The correct architecture is:

  1. The guard switch has dual-channel outputs (NC/NC or OSSD pairs).
  2. Both channels wire to a dedicated safety relay or to safety-rated inputs on a safety PLC.
  3. The safety relay or safety PLC monitors both channels for agreement. A single-channel failure (one channel stuck high or low) is detected within the diagnostic test interval and triggers a safe state.
  4. The safety relay or safety PLC initiates the correct stop category — typically Category 0 (immediate de-energisation of the drive) or Category 1 (controlled stop followed by de-energisation) per IEC 60204-1.

For a detailed walkthrough of how stop categories and safety relays interact in a real circuit, see E-stop safety circuit in PLC ladder logic.

OSSD Signals from Presence-Sensing Devices

Light curtains and safety scanners output OSSD (Output Signal Switching Device) signals — two redundant PNP transistor outputs (OSSD1 and OSSD2) that are both active high (24 V DC) when the field is clear and both switch to 0 V when a beam is broken or an object is detected.

The safety relay or safety PLC monitors both OSSD outputs continuously. The outputs also pulse low briefly (test pulses, typically < 1 ms) to detect short circuits between OSSD1 and OSSD2. If the monitoring device sees one output low while the other is high for longer than the allowed discrepancy time, it flags a fault and demands a manual reset.

Wiring rules for OSSD signals:

  • Route OSSD1 and OSSD2 in separate cables, or in a cable with a screen between the conductors, to reduce the risk of cross-faults.
  • Never connect OSSD outputs to standard PLC inputs without an intervening certified safety monitoring relay or safety PLC.
  • Check the response time of the monitoring device against the stopping time of the machine when calculating the minimum safety distance.
Interlocked Guard OSSD Dual-Channel Safety Circuit Architecture — Guard Switch to Safety Relay to Drive A flow diagram showing the correct safety circuit architecture for an interlocked guard: the guard switch produces two independent NC outputs that wire to a certified safety relay monitoring both channels, which monitors for discrepancy and initiates a Category 0 or Category 1 stop to the drive's STO input. Guard Switch (tongue / RFID coded) Channel 1: NC Channel 2: NC Dual-channel output ISO 14119 Ch1 Ch2 Safety Relay or Safety PLC Monitors Ch1 & Ch2 for agreement Discrepancy detected → fault + manual reset Test pulses on OSSD detect cross-faults ISO 13849 PLd / SIL 2 Safe stop Drive / Actuator STO input Cat 0: immediate Cat 1: controlled stop then STO NEVER wire OSSD to standard PLC input
Interlocked guard OSSD dual-channel circuit: the guard switch's two NC channels wire to a certified safety relay that monitors both channels for agreement — never connect OSSD signals directly to a standard PLC input, which lacks the diagnostic coverage required by ISO 13849.

Stop Categories and Guard Interactions

IEC 60204-1 defines three stop categories relevant to guard interlock design:

Stop category Action Typical use with guards
Category 0 Immediate removal of power to actuators Fast-stopping machines; hazard from uncontrolled coast-down is low
Category 1 Controlled stop (drives bring motion to rest), then remove power High-inertia machines where uncontrolled coast-down is itself a hazard
Category 2 Controlled stop, power remains available Possible only where the risk assessment and safety-function design justify maintained power

Many guard-interlock safety functions use Category 0 or Category 1. The category is not chosen by habit: it follows the risk assessment, stopping behavior, drive safety functions, and the hazards created by removing or maintaining power. A controlled Category 1 stop may be appropriate where uncontrolled coast-down creates another hazard; any Category 2 safety use needs a validated architecture that keeps the stop condition under safety-related control.

When guard locking is required, the lock must not release until the machine has achieved its stop condition. This is typically implemented using a standstill monitor (a certified speed detection relay or safety PLC function block) that confirms zero speed before issuing the unlock command.

For a deeper look at how these architectures relate to the broader safety system, the safety PLC vs standard PLC comparison guide covers when a dedicated safety controller is required and what certified architecture it must implement.

Selecting the Right Safeguard

No single guard type suits every application. ISO 12100 Annex B provides a framework for selection; in practice, the decision reduces to four questions:

1. How often is access required? Frequent access (each cycle, each hour) makes a fixed guard impractical and points toward an interlocked guard, a light curtain, or a two-hand control. Infrequent access (quarterly maintenance only) favours a fixed guard with lockout/tagout for the maintenance event.

2. How long does the machine take to stop? If the machine stops faster than a person can reach the hazard after the guard is opened or the light curtain is broken, interlock-without-locking or a light curtain at the correct safety distance may be sufficient. If coast-down is long, guard locking or a two-hand control with an anti-repeat circuit is required.

3. What is the severity of injury if the safeguard fails? High-severity hazards demand higher-reliability safeguards, but severity alone does not assign a Performance Level or SIL. Determine the required risk reduction with the applicable risk-estimation method, then validate the complete safety function: sensor, logic, output devices, diagnostics, wiring, response time, and fault exclusions.

4. Are there secondary hazards from the safeguard itself? A light curtain that mutes automatically during the ejection portion of a press cycle may leave the operator unprotected at a critical moment. A guard door that opens inward into a narrow aisle creates a struck-by hazard. Every safeguarding solution must be evaluated for the hazards it introduces, not just the hazards it mitigates.

Machine Guard Selection Decision Criteria — Access Frequency, Stop Time, Hazard Severity A chart showing four decision criteria for selecting the correct machine guard type: how often access is required, machine stop time relative to reach time, severity of potential injury, and whether the safeguard itself creates secondary hazards, with recommended guard types for each scenario. Decision Criterion Scenario → Recommended Solution 1. Access frequency How often does the area need to be entered? Frequent (every cycle / hour) → interlocked guard or light curtain Infrequent (quarterly maintenance) → fixed guard + LOTO 2. Machine stop time Does the machine stop before a hand can reach the hazard? Stops before reach time → interlock without guard locking Long coast-down → guard locking or two-hand control 3. Injury severity What is the worst-case consequence of guard failure? Severe consequence → calculate PLr/SIL from the risk model Lower risk → justify the selected architecture and diagnostics 4. Secondary hazards Does the guard itself introduce a new hazard? Light curtain muting during ejection → re-evaluate mute zone Door opens into aisle → struck-by risk, change door swing direction
Machine guard selection: four questions drive the decision — access frequency, machine stop time vs. reach time, injury severity (determines the required Performance Level), and whether the safeguard introduces secondary hazards that must also be mitigated.

Downloadable machine-guarding risk review

A safeguard review should cover every human interaction, not only automatic production. Include loading, setup, jam clearing, cleaning, teaching, maintenance, and foreseeable bypass attempts. For each task, capture the hazardous energy, exposed person, access frequency, stopping time, required risk reduction, selected device, reset/restart behavior, and validation evidence.

Download the machine-guarding risk-review worksheet (CSV). It is a planning aid, not a risk-assessment method or certification. Pair it with the applicable standards, the machine manufacturer's instructions, and a competent safety engineer. Use the safety-relay validation checklist for discrete relay-based functions and the lockout/tagout procedure guide for maintenance energy isolation.


Frequently Asked Questions

What is machine guarding?

Machine guarding is the use of physical barriers (guards) and safety devices to prevent workers from contacting the hazardous parts of a machine — rotating elements, cutting edges, pinch points, and ejected materials — during normal operation, setup, and maintenance.

What are the types of machine guards?

The four main types are: fixed guards (permanently attached, require tools to remove), interlocked guards (movable barriers linked to the machine's control system via a safety switch), adjustable guards (repositioned manually for different workpiece sizes), and self-adjusting guards (move automatically with the workpiece). Safeguarding devices — light curtains, safety scanners, two-hand controls, and safety mats — are sometimes grouped with guards but are technically a separate category.

What is the difference between a guard and a safeguarding device?

A guard is a physical barrier that prevents access to a hazard zone. A safeguarding device detects a person entering the hazard zone (or requires a deliberate two-handed action) and sends a stop signal to the machine — it does not physically block entry. Guards protect passively; safeguarding devices protect actively via the machine's control system.

What does OSHA require for machine guarding?

OSHA 29 CFR 1910.212 requires that one or more methods of machine guarding be used wherever machines present a hazard from rotating parts, ingoing nip points, flying chips or sparks, or point-of-operation hazards. Guards must be affixed to the machine or secured against displacement, must not create additional hazards, and must prevent the operator from reaching into the danger zone during the operating cycle. Machine-specific standards (1910.213–1910.218) add further requirements for woodworking, abrasive wheels, mechanical power presses, and forging machinery.

#machineguarding#safeguarding#interlockedguard#presencesensing#machinesafety#OSHA
Share this article:

Related Articles