Security+
SY0-801 · From November 17, 2026
1General Security Concepts
16%
2Threats, Vulnerabilities and Attacks
24%
3Security Architecture
19%
4Security Operations
27%
5Security Program Management and Oversight
14%
Certification comparison
Security+ vs SSCP
They cover similar ground at a similar level, from two different bodies. Security+ is CompTIA’s and has no experience requirement. SSCP is ISC2’s, requires paid security work and sits on the path toward CISSP.
Last updated
Side by side
The two exams at a glance
Every figure comes from the vendor’s own pages, through our exam guides, and is checked every week.
| CompTIA Security+ | ISC2 SSCP | |
|---|---|---|
| Vendor | CompTIA | ISC2 |
| Exam code | SY0-801, SY0-701 | SSCP |
| Level | Intermediate | IntermediateISC2 calls it Practitioner |
| Written for | Security analyst or engineer | Security analyst or engineer |
| Questions | Up to 90 | 100–125 |
| Time | 90 min | 2 hours |
| Passing score | 750 / 900 | 700 / 1000 |
| Exam cost | Varies by countryCompTIA shows the price for your country before you pay | $249Standard registration in the Americas; set by region |
| Experience | Network+ and 2 years in security administrationRecommended experience | 1 year in one of its 7 domainsExperience required |
| Renewal | Every 3 years: 50 CEUs | Every 3 years: 60 CPE credits |
| Exam outline | 5 domainsLargest: Security Operations (27%) | 7 domainsLargest: Security Concepts and Practices (16%) |
| What’s changing | SY0-801 launches on November 17, 2026. SY0-701 retires on June 11, 2027 | No change announced |
Levels are our own rating, from the level each vendor gives its exam. How we check our facts
Exam domains
What each exam covers
Each domain’s share of the exam, as the vendor publishes it. Where one exam has two versions on sale, this is the newer one.
SSCP
SSCP
1Security Concepts and Practices
16%
2Access Controls
15%
3Risk Identification, Monitoring and Analysis
15%
4Incident Response and Recovery
14%
5Cryptography
9%
6Network and Communications Security
16%
7Systems and Application Security
15%
Which one
Which should you take?
Choose Security+ if
you’re entering security, or you want a baseline certification you can complete without an experience requirement.
Choose SSCP if
you already work in security operations or administration and plan to continue with ISC2, toward CISSP.
Which one first?
You don’t need both: they show much the same level. Pick the body whose path you’ll follow. Without the experience ISC2 asks for, passing SSCP makes you an Associate of ISC2 until you have it, while Security+ certifies you straight away.
Beyond the numbers
What really differs
A recommendation against a requirement
CompTIA recommends experience for Security+ but doesn’t check it. ISC2 requires it for SSCP and verifies it through an endorsement after you pass.
Question types
Security+ mixes multiple-choice questions with performance-based ones, where you solve a problem in a simulated environment. SSCP is multiple choice throughout.
Where each leads
Security+ leads into CompTIA’s path, toward CySA+ and PenTest+. SSCP leads into ISC2’s, toward CISSP and its specialist certifications.
FAQs
Got Questions? We’ve Got Answers.
Find quick answers or contact our support team.
Should I take Security+ or SSCP first?
You don’t need both: they show much the same level. Pick the body whose path you’ll follow. Without the experience ISC2 asks for, passing SSCP makes you an Associate of ISC2 until you have it, while Security+ certifies you straight away.
Which is harder, Security+ or SSCP?
They sit at the same level: we rate both intermediate. What differs is what they cover, so the harder one is usually the one further from your own experience.
What experience do I need for Security+ and SSCP?
Security+: CompTIA recommends Network+ and 2 years in security administration. It isn’t required to sit the exam. SSCP: ISC2 requires 1 year in one of its 7 domains to certify. You can take the exam before you have it.
Which costs more, Security+ or SSCP?
Security+: Varies by country. CompTIA shows the price for your country before you pay. SSCP: $249 (standard registration in the Americas; set by region). Check ISC2’s site for the price in your country.
