Every wellhead valve that opens or closes on a producing well is moved by hydraulic pressure, not by hand.
The WHCP is where that pressure is made, stored, and sent out to do the job safely.
A Wellhead Control Panel supplies the hydraulic pressure that opens and closes every valve on a producing wellhead, and keeps enough pressure in reserve to shut the well in fast if something goes wrong.
We will cover the six major components, the three hydraulic pressure headers, pump and accumulator sizing, and how a fire actually triggers an automatic well shutdown.
What a Wellhead Control Panel Actually Does
WHCP stands for Wellhead Control Panel, a free standing cabinet that provides hydraulic supply to the wellhead valves, choke valves, HIPPS, and fusible plug loops on an oil or gas producing well.
Every valve on the Christmas tree, the stack of valves sitting on top of a wellhead, is actuated hydraulically rather than manually, and the WHCP is the single source that generates and delivers that hydraulic pressure.
The panel itself does not carry its own controller. It interfaces with a separate PLC system, which decides when a valve should open or close, while the WHCP simply supplies the hydraulic muscle to make that happen.
6 Major Parts Inside a WHCP
These six parts cover the core of most WHCP designs, regardless of the specific vendor or well configuration.
The Three Hydraulic Pressure Headers in a WHCP
A WHCP does not run everything off one pressure. Different valves need different force to operate, so the panel splits its hydraulic output into three headers.
| Header | Feeds | Purpose |
|---|---|---|
| High Pressure | SCSSV, Surface Controlled Subsurface Safety Valve | Holds the deep downhole safety valve open against well pressure |
| Medium Pressure | SSV, Surface Safety Valve | Operates the surface level safety valve on the Christmas tree |
| Low Pressure | Instrumentation and pilot signals | Runs pilot valves and signal circuits that do not need high force |
Sizing the pump and hydraulic lines for these headers depends on the pressure each valve actually needs, the distance from the panel to the wellhead, and how quickly the valve has to respond once a signal is given.
How Fusible Plug Loops Trigger an Automatic Shutdown
A fusible plug loop is a passive fire detection system built directly into the WHCP's hydraulic supply, requiring no electrical power or PLC logic to work.
Small plugs filled with a low melting alloy sit in a loop maintaining hydraulic pressure. If a real fire reaches the wellhead area, the plug's core melts, the loop loses pressure instantly, and the resulting pressure drop trips the well shut automatically.
This gives a wellhead a fire safety response that works even if the panel's electrical system, its PLC, or its main pumps have already failed, since the loop depends only on hydraulic pressure and heat.
Sizing the Pump and Accumulator Correctly
Undersizing any one of these, the pump, the accumulator, or the hydraulic line itself, quietly slows down valve response across the whole well, often long before it causes an outright failure.
WHCP and HIPPS: How They Work Together
A WHCP is not the same system as a HIPPS system, though the two are closely connected on many wells.
HIPPS is the safety instrumented system that decides when a high pressure event demands an emergency shutdown. The WHCP is one of the systems HIPPS calls on, since it supplies the hydraulic pressure that actually closes the protective valves once HIPPS gives the signal.
In practice, HIPPS is the decision maker and the WHCP is the muscle, and a wellhead's real safety performance depends on both working correctly together, not on either one alone.
Watch: WHCP Panel Demonstration
Wellhead Control Panel Questions Engineers Ask
Related Articles on This Site
- Solenoid Valve Working Principle
- Valve Actuator Types and Applications
- Safety Relief Valve, PSV Sizing
- Fail Safe Valve Position, Fail Open, Fail Closed, Fail Locked
- Valve Torque and Actuator Failure
External References
What We Learn Today
- A WHCP supplies hydraulic pressure to wellhead valves and interfaces with a separate PLC for control logic.
- Three pressure headers, high, medium, and low, feed the SCSSV, the SSV, and instrumentation separately.
- A fusible plug loop can shut a well in from a fire alone, with no electrical power needed at all.