Security+
SY0-801 · From November 17, 2026
1General Security Concepts
16%
2Threats, Vulnerabilities and Attacks
24%
3Security Architecture
19%
4Security Operations
27%
5Security Program Management and Oversight
14%
Certification comparison
Security+ vs CySA+
Security+ is the broad starting point for security work. CySA+ goes deeper into one job, the security analyst’s, and comes after Security+ on CompTIA’s path.
Last updated
Side by side
The two exams at a glance
Every figure comes from the vendor’s own pages, through our exam guides, and is checked every week.
| CompTIA Security+ | CompTIA CySA+ | |
|---|---|---|
| Vendor | CompTIA | CompTIA |
| Exam code | SY0-801, SY0-701 | CS0-004, CS0-003 |
| Level | Intermediate | Advanced |
| Written for | Security analyst or engineer | Security analyst or engineer |
| Questions | Up to 90 | Up to 85 |
| Time | 90 min | 165 min |
| Passing score | 750 / 900 | 750 / 900 |
| Exam cost | Varies by countryCompTIA shows the price for your country before you pay | Varies by countryCompTIA shows the price for your country before you pay |
| Experience | Network+ and 2 years in security administrationRecommended experience | About 4 years as a SOC or vulnerability analystRecommended experience |
| Renewal | Every 3 years: 50 CEUs | Every 3 years: 60 CEUs |
| Exam outline | 5 domainsLargest: Security Operations (27%) | 4 domainsLargest: Security Operations (34%) |
| What’s changing | SY0-801 launches on November 17, 2026. SY0-701 retires on June 11, 2027 | CS0-003 retires on December 22, 2026 |
Levels are our own rating, from the level each vendor gives its exam. How we check our facts
Exam domains
What each exam covers
Each domain’s share of the exam, as the vendor publishes it. Where one exam has two versions on sale, this is the newer one.
CySA+
CS0-004
1Security Operations
34%
2Vulnerability Management
26%
3Incident Response and Management
24%
4Reporting and Communication
16%
Which one
Which should you take?
Choose Security+ if
you’re moving into security from IT support or networking, or a job asks for a baseline security certification.
Choose CySA+ if
you already work in or near a security operations team and want to prove you can detect, investigate and respond to threats.
Which one first?
Security+ first. CompTIA places CySA+ after it on its cybersecurity path, and CySA+ assumes you already know what Security+ covers.
Beyond the numbers
What really differs
Breadth against depth
Security+ covers the whole field at working level, from threats and architecture to operations and governance. CySA+ concentrates on the analyst’s work: monitoring, vulnerability management, incident response and reporting.
The job each points to
Security+ fits many roles, from systems administrator to junior analyst. CySA+ is written for people who work with alerts, logs and scan results every day.
How you’re tested
Both mix multiple-choice questions with performance-based ones, where you solve a problem in a simulated environment. In CySA+, more of that time goes on reading logs and tool output.
FAQs
Got Questions? We’ve Got Answers.
Find quick answers or contact our support team.
Should I take Security+ or CySA+ first?
Security+ first. CompTIA places CySA+ after it on its cybersecurity path, and CySA+ assumes you already know what Security+ covers.
Which is harder, Security+ or CySA+?
CySA+. We rate CySA+ advanced and Security+ intermediate, going by the level each vendor gives its exam and the experience it expects.
What experience do I need for Security+ and CySA+?
Security+: CompTIA recommends Network+ and 2 years in security administration. It isn’t required to sit the exam. CySA+: CompTIA recommends about 4 years as a SOC or vulnerability analyst. It isn’t required to sit the exam.
Which costs more, Security+ or CySA+?
The answer is the same for both: varies by country. CompTIA shows the price for your country before you pay.
