Combustion safety controls are automated systems that monitor, regulate, and shut down burner and combustion equipment when unsafe conditions are detected. They are required because uncontrolled combustion poses serious risks of explosion, fire, and toxic gas release in industrial environments. The sections below unpack how these systems work, what they consist of, and what the regulations say about them.
How do combustion safety controls actually work?
Combustion safety controls work by continuously monitoring the key variables of a combustion process, such as flame presence, fuel pressure, air supply, and temperature, and automatically taking corrective action if any of those variables fall outside safe limits. If a fault is detected, the system triggers a controlled shutdown before a dangerous condition can develop.
At the core of most systems is a logic controller, often called a burner management system (BMS) or safety programmable logic controller (safety PLC), that processes signals from sensors in real time. This controller follows a pre-programmed sequence for startup, normal operation, and shutdown. During startup, it checks that all conditions are safe before allowing fuel to flow. During operation, it continuously validates that a stable flame is present and that fuel and air ratios remain within defined parameters.
When a fault occurs, whether it is a flame failure, a pressure drop, or a sensor fault, the controller initiates a lockout. In a lockout state, fuel valves close automatically and the system will not restart without a manual reset and investigation. This deliberate design prevents automatic restarts after a fault, which could otherwise mask a dangerous underlying problem.
What are the main components of a combustion safety system?
A combustion safety system is made up of several interconnected components: a flame detector, fuel safety shutoff valves, a burner management controller, pressure and temperature sensors, and an operator interface. Each component plays a specific role in detecting, responding to, and communicating about unsafe conditions.
- Flame detectors: These sensors confirm whether a flame is present and stable. They use ultraviolet (UV), infrared (IR), or combined UV/IR technology depending on the fuel type and process environment.
- Fuel safety shutoff valves: Fail-safe valves that close automatically when the control system detects a fault, cutting off the fuel supply to the burner.
- Burner management controller: The logic unit that sequences startup, monitors normal operation, and executes shutdown procedures. It is typically certified to a specific safety integrity level (SIL).
- Pressure and flow sensors: These verify that fuel pressure and air supply are within the required operating range before and during combustion.
- Operator interface and alarm system: Displays system status, active alarms, and fault history so that operators and maintenance teams can respond quickly and accurately.
In more complex installations, gas detection equipment is also integrated into the safety system to monitor for combustible or toxic gas accumulation in the surrounding area, adding an additional layer of protection beyond the burner itself.
What regulations and standards require combustion safety controls?
Combustion safety controls are required by a combination of European directives, international standards, and industry-specific codes. The most relevant frameworks include EN 746-2 for industrial thermal processing equipment, EN 298 for automatic gas burner control systems, and the IEC 61511 standard for functional safety in the process industry.
In Europe, the Machinery Directive and the ATEX Directive also apply where combustion equipment operates in potentially explosive atmospheres. These directives require that safety-related control functions are designed, validated, and maintained to a defined Safety Integrity Level (SIL) under IEC 61508 or IEC 61511.
Beyond formal standards, insurers and national regulatory bodies such as occupational health and safety authorities often mandate specific combustion safety measures as a condition of operating permits. In practice, this means that plant operators in the chemical, petrochemical, and utilities sectors cannot legally operate fired equipment without documented, certified combustion safety controls in place. Non-compliance can result in enforcement action, insurance invalidation, or forced shutdown.
What happens when a combustion safety control fails?
When a combustion safety control fails, the consequences depend on how the failure occurs. A fail-safe failure, where the system shuts down the burner as designed, results in process downtime but no safety incident. A dangerous failure, where the system does not respond correctly to a fault, can allow uncontrolled combustion, fuel accumulation, or explosion conditions to develop.
Dangerous failures are the primary concern in safety system design, which is why combustion safety controls are built and certified to specific SIL levels. A higher SIL rating means the system has a lower probability of dangerous failure on demand. Regular proof testing, which is required by IEC 61511, is specifically designed to reveal hidden dangerous failures before they can cause harm.
In practical terms, a failed flame detector that does not signal a fault could allow fuel to continue flowing after a flame extinguishes, creating an explosive atmosphere inside the combustion chamber. This is one of the most serious failure scenarios in burner operation and is exactly the risk that redundant sensors and periodic testing are designed to prevent.
What’s the difference between a burner management system and a flame monitor?
A burner management system (BMS) is the complete safety control system that manages the entire combustion process, including startup sequencing, operational monitoring, and shutdown. A flame monitor is a single component within that system, specifically responsible for detecting whether a flame is present and stable. The BMS uses the signal from the flame monitor as one of many inputs to make safety decisions.
Put simply, a flame monitor answers the question “is there a flame?” while the BMS answers the question “is the entire combustion process safe to continue?” A flame monitor on its own cannot provide full combustion safety because it does not account for fuel pressure, air supply, valve position, or other critical variables. The BMS integrates all of these signals into a single safety logic.
In some smaller or simpler burner applications, a flame safeguard controller combines the functions of flame monitoring and basic burner sequencing into a single device. These are common in commercial heating applications but are generally insufficient for the more complex safety requirements of process industry installations, where a fully engineered BMS with SIL-rated components is the appropriate solution.
When should combustion safety controls be tested or replaced?
Combustion safety controls should be tested at intervals defined by the system’s safety integrity level requirements and the manufacturer’s recommendations, typically ranging from annual proof tests to more frequent partial stroke testing of safety valves. Replacement is required when a component reaches the end of its qualified service life, fails a proof test, or is no longer supported by the manufacturer.
IEC 61511 requires that the proof test interval for each safety function is calculated as part of the overall safety lifecycle. This calculation takes into account the component’s failure rate, the required SIL level, and the acceptable probability of dangerous failure. Skipping or delaying proof tests is not just a maintenance oversight but a regulatory compliance failure.
Replacement triggers include:
- Components exceeding their rated mean time to dangerous failure (MTTFd)
- Repeated nuisance trips or false alarms indicating sensor degradation
- End of manufacturer support, meaning safety-critical firmware and spare parts are no longer available
- Changes to the process that alter the risk profile, requiring reassessment of the entire safety function
In 2026, many plants operating equipment installed in the early 2000s are reaching the point where original combustion safety components are approaching or exceeding their qualified service life. Proactive replacement planning, rather than waiting for a failure, is the recommended approach for maintaining both safety and compliance.
How Anaparts supports your combustion safety requirements
At Anaparts, we combine technical depth with hands-on experience in flame monitoring, fire detection, gas detection, and full instrumentation systems for process industry applications. Whether you need a single replacement flame detector or a complete burner management solution, we work with you to find the right fit for your specific process and compliance requirements.
Here is what we bring to combustion safety projects:
- Specialist product portfolio: We supply solutions from trusted manufacturers including Flamonitec and GTE Adicos, covering UV/IR flame detection, gas monitoring, and spark suppression.
- System integration capability: We design and build instrumentation cabinets that combine hardware, wiring, and logic into a ready-to-install safety system.
- Advisory support: We help you interpret your SIL requirements, select the right components, and plan proof test schedules that keep you compliant.
- Custom solutions: From individual components to turnkey installations, we tailor our offering to your plant’s exact needs rather than offering a one-size-fits-all product.
If you are reviewing your combustion safety setup or planning an upgrade in 2026, we are ready to help. Contact us to discuss your requirements and find out how we can support your safety and compliance goals.
Related Articles
- Which spark detector technology is most reliable for high-dust environments?
- How do you design a dust extraction system that minimises explosion risk?
- How do you select a fire detection system for environments with corrosive chemicals?
- What are the most common fire hazards in an oil refinery?
- How do you carry out a safety system audit in a power plant?
- What maintenance is required to keep an ATEX flame detector compliant?
- What is the difference between ATEX Zone 1 and Zone 2 flame detectors?
- How do you select the right ATEX flame detector for a hazardous area?
- How do you maintain fire detection systems in a harsh chemical plant environment?
- What are the main benefits of smoldering detection systems?
- How do you troubleshoot fixed gas detector malfunctions?
- What is a UV flame detector?
- What is M-Bus communication in fire detection networks?
- What gases do fire detectors monitor to identify smoldering fires?
- Why are fail-safe designs critical for flame monitoring systems?
