A surface safety valve is the fail-safe valve on the wellhead itself - the actuated gate valve on the christmas tree that shuts the well in at surface when the safety system calls for it. It is the wellhead's primary automatic barrier, the surface counterpart to the downhole subsurface safety valve, and it is wired into the same shutdown logic that watches for abnormal pressure, fire, or gas. This guide explains how the SSV works, how it fits the wellhead safety loop, and how its status is watched in a shutdown system.
Surface Safety Valve in one line: A surface safety valve (SSV) is an actuated, fail-safe valve mounted on the wellhead christmas tree - typically the master valve or a wing valve fitted with an actuator - that automatically closes to shut the well in at surface when control pressure is lost or a shutdown is triggered. It is held open by hydraulic or pneumatic pressure and closes on a spring when that pressure bleeds off, so it fails to the safe, closed position on loss of supply, loss of signal, or any sensed unsafe condition at the well.
A surface safety valve is a rated wellhead gate valve fitted with a spring-return actuator. Control pressure - hydraulic or pneumatic - applied to the actuator holds the gate open against a spring so the well produces normally. When that control pressure is vented, whether by the safety system commanding a shutdown or by a failure in the supply, the spring drives the gate closed and the valve seals. This is the same held-open, fails-closed philosophy as the downhole valve, applied at the wellhead where a person or a fire could otherwise interact with the well.
The actuator's control pressure is routed through the well's shutdown logic, so the SSV closes not just on a manual command but on any sensed unsafe condition. Pilots and sensors that detect high or low wellhead pressure, a fire loop, or a facility emergency shutdown all bleed the control line to the actuator, which closes the valve. Because it is the master or wing valve on the tree, closing the SSV stops flow from the well right at its source.
The surface safety valve is one element of a coordinated wellhead safety system, not a standalone device. Around it sit the sensors and pilots that decide when to close it: high-pressure and low-pressure pilots that detect a blocked or ruptured flowline, the subsurface safety valve downhole, and the facility's wider emergency shutdown network. A high-pressure event suggesting a downstream blockage, or a low-pressure event suggesting a line break, both trip the loop and close the SSV, isolating the well before the abnormal condition can escalate.
It is worth distinguishing the SSV from the devices it works alongside. The subsurface safety valve is the downhole barrier deep in the tubing; the SSV is the surface barrier on the tree; and a facility emergency shutdown valve isolates process equipment or a whole station. On a well, these are layered so that a single failure does not leave the well unprotected - the SSV handles surface isolation while the SSSV stands ready as the deep barrier if surface control is lost entirely.
For a safety valve, knowing its state at all times is as important as the valve itself. Operators watch the SSV's control (actuator) pressure, its open or closed status, and the shutdown signals that command it, so that an unexpected closure, a loss of control pressure, or a tripped pilot is immediately visible. Periodic function testing confirms the valve still strokes closed and seals when demanded, and those test records are part of the well's safety documentation.
A cloud SCADA such as Merobix reads wellhead and shutdown instrumentation over Modbus and trends SSV status, control-line pressure, and the wellhead high- and low-pressure pilots for every well from a browser. Alarming the moment an SSV closes, or the moment control pressure or a pilot moves toward a trip, means an operator learns of a shut-in well or an approaching shutdown without waiting for a site visit. Keeping the surface safety valve's status alongside the SSSV and the rest of the shutdown chain gives one clear view of a well's whole safety loop, surface and subsurface together.
A surface safety valve (SSV) is the actuated fail-safe valve on the wellhead christmas tree that shuts the well in at surface. A subsurface safety valve (SSSV) is a fail-safe valve deep in the production tubing that isolates the well below surface if surface control is lost. They are layered barriers - the SSV handles surface isolation, and the SSSV is the deep backstop if the wellhead itself is compromised.
The SSV is held open by hydraulic or pneumatic control pressure applied to a spring-return actuator. When that pressure is vented - by a commanded shutdown, a sensed unsafe condition, or a supply failure - the spring drives the valve closed and it seals. Because it needs pressure to stay open, loss of control pressure or loss of signal both close the valve to the safe position.
The SSV closes on any input that bleeds its actuator control pressure through the shutdown logic: a high-pressure pilot indicating a downstream blockage, a low-pressure pilot indicating a line break, a fire or gas detection loop, a facility emergency shutdown, or a manual shutdown command. It also closes automatically if the control-pressure supply is lost for any reason.
This page references the protocol specifications published by the organizations below. Editions, product capabilities, and documentation change over time - confirm current requirements and specifications directly with the source.
Last reviewed: July 27, 2026. Merobix is not affiliated with, endorsed by, or sponsored by these organizations; their names are used only to identify the standards and products discussed.
Merobix reads your field devices into a cloud SCADA - the real thing behind these terms, live in days from any browser.