CompTIA's Security+ is its core security certification and covers the basics every security role needs. CySA+ is the analyst certification that builds on it, with a focus on detection, vulnerability management, incident response and reporting in a SOC. Most people should take Security+ first, then CySA+ once they're working in or near security operations.
What is the difference between Security+ and CySA+?
Security+ is broad. It covers security concepts, threats and vulnerabilities, security architecture, security operations and program management. It's the certification I point most people to when they're moving from help desk or networking into security.
CySA+ goes deeper on one job, the analyst. CompTIA says it validates your ability to detect, analyze and respond to threats in security operations and vulnerability management roles. You'll spend time on SIEM and EDR output, scan results, attack frameworks like MITRE ATT&CK and how to write up what you found.
How do the Security+ and CySA+ exams compare?
CompTIA is mid-change on both exams right now, so the version matters.
- Exam code
Security+ V7: SY0-701
CySA+ V4: CS0-004 - Launched
Security+ V7: November 7, 2023
CySA+ V4: June 23, 2026 - Questions
Security+ V7: Up to 90, multiple choice and performance-based
CySA+ V4: Up to 85 - Time
Security+ V7: 90 minutes
CySA+ V4: 165 minutes - Passing score
Security+ V7: 750 on a 100 to 900 scale
CySA+ V4: 750 on a 100 to 900 scale - Recommended experience
Security+ V7: Network+ and two years in a security or systems administrator role
CySA+ V4: About four years in a SOC analyst or vulnerability analyst role - CEUs to renew every 3 years
Security+ V7: 50
CySA+ V4: 60
CySA+ V4 domains are Security Operations at 34 percent, Vulnerability Management at 26 percent, Incident Response and Management at 24 percent, and Reporting and Communication at 16 percent. Security+ V7 is weighted most on Security Operations at 28 percent.
Which exam versions are live right now?
For Security+, V7 (SY0-701) is current. CompTIA says Security+ V8 (SY0-801) launches on or around November 17, 2026, and the English V7 exam retires June 11, 2027. So you have room to finish on V7 if you're already studying.
CySA+ V4 (CS0-004) launched June 23, 2026. CompTIA's retirement dates for V3 (CS0-003) are November 22, 2026 for English learning products and December 22, 2026 for the English exam. If you're starting CySA+ now, ask us which version your class lines up with before you schedule.
Should I take Security+ or CySA+ first?
Security+ first for almost everyone. CompTIA's recommended experience for CySA+ is about four years in a SOC or vulnerability analyst job, and Security+ is where most people build the vocabulary CySA+ assumes.
The exception is someone already working as an analyst who has years of alert triage behind them. They can go straight to CySA+. Even then, I'd want them to be honest about gaps in areas like cryptography or architecture that Security+ covers and CySA+ doesn't slow down for.
Do Security+ and CySA+ help with CISSP or DoD jobs?
Both are on ISC2's approved credential list. Either one can satisfy one year of the five-year CISSP experience requirement.
For DoD work, CompTIA lists DoD 8140 work roles for Security+ V7 on its exam page, including cyber defense analyst, incident responder and system administrator. If you're working toward a DoD role, check our DoD 8570 and 8140 guide and confirm the requirement with your own command or employer.
How do you renew Security+ and CySA+?
CompTIA certifications run on a three-year cycle. Security+ needs 50 continuing education units to renew and CySA+ needs 60. Activities have to happen inside your cycle, and at least half of a course's content has to relate to the exam objectives for the certification you're renewing.
How can Accumentum help with Security+ and CySA+?
Our Security+ training course is built on the SY0-701 objectives. The course page says most students finish in 4 to 8 weeks part-time, taught as virtual instructor-led training with hands-on labs and lifetime access to recordings. The CySA+ training course page says most learners take 6 to 10 weeks part-time. See all of it on our CompTIA training page.
Not sure you're ready? Take the free Exam Readiness Score for Security+ or the CySA+ version. The Security+ check is 20 questions and ends with a 14-day focus plan. It's an Accumentum practice check, not official CompTIA questions.
Both certifications are on the PathPay 12-Month Program. Each includes the exam voucher. PathPay® is a payment plan for one course. It isn't a loan and it isn't insurance.
PathPass® has Security+ and CySA+ practice banks at $19 a month for one exam or $39 for all banks, with a free preview. It's exam prep with original questions, not a certification body, and it has no dumps. After you pass, PathLock™ gives you packs and labs for CompTIA renewals plus a renewal calendar. You still report CEUs to CompTIA yourself, and PathLock isn't affiliated with Pathlock, Inc.
Frequently asked questions
Is CySA+ harder than Security+?
Most people find it harder. CompTIA recommends about four years of SOC or vulnerability analyst experience for CySA+, and the exam gives you 165 minutes for up to 85 questions built around analyst work.
Can I skip Security+ and go straight to CySA+?
CompTIA doesn't require Security+ first. If you already work as a SOC or vulnerability analyst, going straight to CySA+ can work. Everyone else is better off starting with Security+.
Should I wait for Security+ V8?
Not if you're already studying. CompTIA says V8 launches on or around November 17, 2026, and the English V7 exam doesn't retire until June 11, 2027.
How many CEUs do I need to renew Security+ and CySA+?
Security+ needs 50 CEUs and CySA+ needs 60, both within a three-year renewal cycle.
Which CySA+ exam version should I take?
CySA+ V4 (CS0-004) launched June 23, 2026. The English V3 exam (CS0-003) retires December 22, 2026. Confirm which version your class covers before you schedule.
Sources
Official facts checked Sep 28, 2026.
- CompTIA, Security+ overview (V7 current, V8 date): https://www.comptia.org/en-us/certifications/security/
- CompTIA, Security+ V7 exam details and domain weights: https://www.comptia.org/en-us/certifications/security/v7/
- CompTIA, Security+ V8 exam details: https://www.comptia.org/en-us/certifications/security/v8/
- CompTIA, CySA+ overview (V3 retirement dates): https://www.comptia.org/en-us/certifications/cybersecurity-analyst/
- CompTIA, CySA+ V4 exam details and domain weights: https://www.comptia.org/en-us/certifications/cybersecurity-analyst/v4/
- CompTIA, Earn Continuing Education Units (CEU table and rules): https://www.comptia.org/en-us/resources/ce/learn/earn-continuing-education-units-ceus/
- ISC2, CISSP Experience Requirements (approved credential list): https://www.isc2.org/certifications/cissp/cissp-experience-requirements
Accumentum facts come from the live Security+ and CySA+ course pages, /exam-readiness-score/, /pathpay/, /pathpay/subscription/, /pathpass/ and /pathlock/ on accumentum.net.
