Abstract: Many operators choose not to utilise partial-stroke testing arrangements even when the equipment required for it to be performed is available, due to a perceived risk of over-travel and/or spurious trip. To alleviate this, we describe a safety valve system comprising a valve operable to move between an operating state and a safe state, a valve actuator operatively connected to the valve to control its state, and including a bias toward the safe state, a pair of drive members powered by a pressure media, each acting against the bias to urge the valve toward the operating state, a first control valve arranged to selectively convey pressure media to both drive members and to withdraw supply on receipt of a safety trigger, and a second control valve arranged to selectively convey pressure media to one drive member only of the pair and to withdraw supply on receipt of a test signal.