If my sauce is under pH 4.6, is it automatically safe?

No. A pH of 4.6 or below stops botulism, but it does not quickly kill the acid-tolerant bacteria that can ride in on fresh peppers: E. coli O157:H7, Salmonella and Listeria monocytogenes. Research at the USDA's food fermentation lab found these organisms can survive in acidified vegetables long enough to cause illness, and that E. coli O157:H7 may make someone sick from as few as one to ten cells [1]. That is why shelf-stable sauces are also heated or held under set conditions. This page lays out what the research shows, why the type of acid matters, and what it means for fresh, cooked and fermented sauces.

Two different hazards, two different controls

Food safety for hot sauce is easiest to understand as two separate problems that happen to share one bottle.

The first hazard is covered on botulism and hot sauce. This page is about the second. The two need different controls because acid works on them differently. Acid keeps botulism spores dormant indefinitely. Against live, acid-tolerant cells, acid works slowly, and how slowly depends on the pH, the acid and the temperature [1].

What the research shows

The 5-log standard (Breidt, Sandeep and Arritt, 2010)

F. Breidt of the USDA Agricultural Research Service and two coauthors set out the scientific basis for how acidified vegetables are heat processed. Their 2010 paper in Food Protection Trends makes four points that matter to a sauce maker [1]:

• E. coli O157:H7, Salmonella enterica and Listeria monocytogenes are acid-resistant, may be present on fresh vegetables, and may survive in acidified products long enough to cause disease.
• Acidified vegetables "must be processed to assure a five log reduction" in those acid-resistant pathogens. Five log means a 100,000-fold reduction: from 100,000 cells to 1. The authors note this matches the standard used for juice under 21 CFR Part 120.
• E. coli O157:H7 is the most acid-resistant pathogen of concern in these products, so a process that handles it handles the others. Listeria "does not survive as well" as E. coli O157:H7 under similar cold, acidic conditions.
• The heat step in an acidified food targets these live cells. Botulism spores survive it and are controlled by keeping the pH at or below 4.6.

The paper then gives time and temperature combinations that achieve the 5-log reduction at pH 4.1 or below. As a short version: their model reaches it at 160°F held for 1.2 minutes, or at 180°F for 0.1 minute, with longer times at lower temperatures [1]. The authors call these figures conservative and well below many commercial processes. The full table, and how it relates to the fill temperatures extension services publish, lives on hot fill and hold.

The same paper found that sauces with acetic acid (vinegar) as the main acid and a pH below 3.3 do not need a heat step, but do need a temperature-dependent holding time before they are safe [1]. Those holding times, the conditions attached to them, and why a process authority must set any cold-fill process for sale are on cold fill.

Acetic acid against citric acid in hot sauce (Lobo Chinchilla and colleagues, 2019)

A 2019 study in the Journal of Food Protection tested this directly in hot pepper sauce. They made model acidified sauces at pH 3.2, 3.5 and 3.9, acidified with either citric or acetic acid, inoculated them with E. coli O157:H7, Salmonella and Listeria, plus a yeast (Pichia manshurica) and a lactic acid bacterium (Lactobacillus curvatus) both isolated from spoiled commercial hot sauces, and held them at room temperature [2].

What they found [2]:

• At pH 3.2 with acetic acid, all three pathogens fell by more than 5 log within half an hour of inoculation, and the spoilage organisms within 6 hours.
• With citric acid, the most tolerant pathogen needed at least 48 hours to fall by the same amount.
• The authors concluded that safety and stability can be reached in a cold-filled sauce by adjusting the pH to 3.2 or less with acetic acid.

The useful lesson for a maker is the gap between the two acids. At the same pH, vinegar killed the pathogens dramatically faster than citric acid. A sauce that gets most of its acidity from lime juice or citric acid behaves differently from a vinegar sauce, even when the meter reads the same. This was a laboratory study on model sauces, and its results set no process for your product; a process authority would weigh studies like it when writing one.

Bacteria that have been stressed get tougher (Tsai and Ingham, 1997)

A 1997 study in the Journal of Food Protection tested E. coli O157:H7 and Salmonella in ketchup, mustard and sweet pickle relish stored at 5°C and 23°C. Cells that had first been adapted to mild acid survived better in ketchup than unadapted cells [3]. The point for a sauce maker is that bacteria coming off produce are not all equally fragile, and laboratory processes are designed around the hardy ones.

Why the acid you choose changes the answer

pH measures how much acid is free in the sauce, but bacteria respond to more than that one number. The 2019 hot sauce study showed it plainly: at the same pH, vinegar sauces killed pathogens far faster than citric acid sauces [2]. The federal research behind cold-fill holding times was built specifically on acetic acid as the primary acid [1].

In practice:

• A vinegar-forward sauce has the strongest evidence behind it for killing acid-tolerant pathogens.
• A citrus or citric acid sauce at the same pH kills more slowly. It still controls botulism if the pH is low enough, but it relies more heavily on its heat step.
• A fermented sauce gets its acidity mostly from lactic acid made by the ferment. How a ferment finished with vinegar is classified for sale is a separate question, answered on is a fermented sauce an acidified food?

What this means for each kind of sauce

A simmer counts as a kill step because Breidt's model shows that at pH 4.1 or below, a 5-log kill of E. coli O157:H7 takes about a minute at 160°F [1]. A sauce brought to a simmer and held there for several minutes exceeds that by a wide margin. What heat does to flavor, color and texture, and how long to simmer at home, is on do you need to cook hot sauce?

The fresh sauce is the one with no kill step at all. A raw sauce made from peppers carrying a few acid-tolerant cells can keep them alive for a while even at low pH, especially if the acid is citrus and the sauce is cold. Fresh sauce is still worth making. Its controls are clean produce, cold storage and short keeping times.

The full shelf-stable picture

A shelf-stable hot sauce needs every control at once: a pH low enough for botulism, a heat step or hold for the live pathogens, a sound seal, and a container that holds it. How those combine, and how the safety of a sealed bottle differs from its quality once opened, is on what makes a sauce shelf stable. If you are planning a commercial process, start with hot fill and hold.

References

1. Breidt, F., K. P. Sandeep and F. M. Arritt, Use of Linear Models for Thermal Processing of Acidified Foods, Food Protection Trends 30(5):268-272, 2010. https://site.extension.uga.edu/foodscienceandtechnology/files/2023/07/Breidt-et-al-2010-Below-4.1.pdf
2. Lobo Chinchilla, A., C. Zúñiga Arrieta, R. W. Worobo, O. I. Padilla Zakour and J. Usaga Barrientos, Fate of Spoilage and Pathogenic Microorganisms in Acidified Cold-Filled Hot Pepper Sauces, Journal of Food Protection 82(10):1736-1743, 2019 (record at University of Costa Rica repository). https://www.kerwa.ucr.ac.cr/items/d13ae886-62d0-4f48-81b7-b7b8377dd160/full
3. Tsai, Y. W., and S. C. Ingham, Survival of Escherichia coli O157:H7 and Salmonella spp. in Acidic Condiments, Journal of Food Protection 60(7), 1997 (abstract record, International Institute of Refrigeration). https://iifiir.org/en/fridoc/survival-of-escherichia-coli-o157-h7-and-salmonella-spp-in-acidic-108914