The present invention relates to control of wind turbines in a situation where a fault condition is detected. Control of a wind turbine is described where a control trajectory and a safe-mode trajectory are calculated based on the current operational state of the wind turbine. If the fault condition is detected the wind turbine is controlled using the safe-mode trajectory, otherwise, the normal operation of the wind turbine is continued where the wind turbine is controlled using the control trajectory.