Security+
SY0-801 · From November 17, 2026
1General Security Concepts
16%
2Threats, Vulnerabilities and Attacks
24%
3Security Architecture
19%
4Security Operations
27%
5Security Program Management and Oversight
14%
Certification comparison
Security+ vs PenTest+
Security+ is the general foundation. PenTest+ is a specialist certification for people who test systems by attacking them, with permission. PenTest+ comes later.
Last updated
Side by side
The two exams at a glance
Every figure comes from the vendor’s own pages, through our exam guides, and is checked every week.
| CompTIA Security+ | CompTIA PenTest+ | |
|---|---|---|
| Vendor | CompTIA | CompTIA |
| Exam code | SY0-801, SY0-701 | PT0-003 |
| Level | Intermediate | Advanced |
| Written for | Security analyst or engineer | Security analyst or engineer |
| Questions | Up to 90 | Up to 90 |
| Time | 90 min | 165 min |
| Passing score | 750 / 900 | 750 / 900 |
| Exam cost | Varies by countryCompTIA shows the price for your country before you pay | Varies by countryCompTIA shows the price for your country before you pay |
| Experience | Network+ and 2 years in security administrationRecommended experience | 3–4 years in penetration testingRecommended experience |
| Renewal | Every 3 years: 50 CEUs | Every 3 years: 60 CEUs |
| Exam outline | 5 domainsLargest: Security Operations (27%) | 5 domainsLargest: Attacks and Exploits (35%) |
| What’s changing | SY0-801 launches on November 17, 2026. SY0-701 retires on June 11, 2027 | No change announced |
Levels are our own rating, from the level each vendor gives its exam. How we check our facts
Exam domains
What each exam covers
Each domain’s share of the exam, as the vendor publishes it. Where one exam has two versions on sale, this is the newer one.
PenTest+
PT0-003
1Engagement Management
13%
2Reconnaissance and Enumeration
21%
3Vulnerability Discovery and Analysis
17%
4Attacks and Exploits
35%
5Post-exploitation and Lateral Movement
14%
Which one
Which should you take?
Choose Security+ if
you’re starting in security or need a baseline certification.
Choose PenTest+ if
you already know the fundamentals and want to work in penetration testing or vulnerability assessment.
Which one first?
Security+ first. CompTIA places PenTest+ after it and expects you to know what Security+ covers.
Beyond the numbers
What really differs
Defending against attacking
Security+ teaches how to protect an organization across the board. PenTest+ teaches how to plan a test, find weaknesses, exploit them and report what you found.
How hands-on they are
Both include performance-based questions. PenTest+ leans much harder on them, and on tools, scripts and reading their output.
The job each points to
Security+ fits many roles, from systems administrator to junior analyst. PenTest+ points at one kind of work: testing security from the attacker’s side.
FAQs
Got Questions? We’ve Got Answers.
Find quick answers or contact our support team.
Should I take Security+ or PenTest+ first?
Security+ first. CompTIA places PenTest+ after it and expects you to know what Security+ covers.
Which is harder, Security+ or PenTest+?
PenTest+. We rate PenTest+ advanced and Security+ intermediate, going by the level each vendor gives its exam and the experience it expects.
What experience do I need for Security+ and PenTest+?
Security+: CompTIA recommends Network+ and 2 years in security administration. It isn’t required to sit the exam. PenTest+: CompTIA recommends 3–4 years in penetration testing. It isn’t required to sit the exam.
Which costs more, Security+ or PenTest+?
The answer is the same for both: varies by country. CompTIA shows the price for your country before you pay.
