Security+ and CySA+: which CompTIA security exam fits where you are now
Both CompTIA vouchers cost $439 in the US as of November 2026, or $579 with a retake, and neither exam has a formal prerequisite. Security+ is the broad first credential, built for people with about two years in security or systems administration. CySA+ is the analyst exam: CompTIA recommends about four years in a security operations or vulnerability analyst role, and its exam runs 165 minutes against 90 for Security+. Both exams are mid-transition: Security+ V8 launches November 17, 2026, and the English CS0-003 retires December 22, 2026, so match your study material to the exam code you will sit.
Exam facts for Security+ next to CySA+
| Security+ | CySA+ | |
|---|---|---|
| Issuer | CompTIA | CompTIA |
| Exam on sale now | SY0-701 (V7); SY0-801 (V8) listed for November 17, 2026, English only | CS0-004 (V4), launched June 23, 2026 |
| US voucher | $439, or $579 with Retake Assurance | $439, or $579 with a retake |
| Questions and time | Up to 90 questions in 90 minutes | Up to 85 questions in 165 minutes |
| Passing score | 750 on a 100 to 900 scale | 750 on a 100 to 900 scale |
| Formal prerequisite | None | None |
| Recommended experience | V7: Network+ and two years as a security or systems administrator. V8: two years as a security administrator | About four years in a security operations or vulnerability analyst role |
| Validity and renewal | Three years; 50 CEUs plus a $150 CompTIA fee | Three years; 60 CEUs plus a $150 CompTIA fee |
| What it signals | Broad security fundamentals: threats, architecture, operations and governance | Day-to-day analyst work: alert triage, log and incident analysis, vulnerability management |
Two CompTIA version changes to plan around this winter
Security+. SY0-701 is the exam sold today. CompTIA lists SY0-801 for November 17, 2026, in English only, and the English SY0-701 exam retires June 11, 2027. Every Security+ course we priced still teaches SY0-701, so a test date before spring 2027 points to V7 material.
CySA+. The change has already happened: CS0-004 launched June 23, 2026, and the English CS0-003 exam retires December 22, 2026. CompTIA's English V3 study products retire November 22, 2026. Unless you sit CS0-003 in English before December 22 with material you already own, study for CS0-004.
Prices for each route, voucher counted
The cheapest routes cost the same for both exams because CompTIA prices its vouchers and bundles identically. The gap opens at the classroom end, where CySA+ classes cost more and fewer of them include the voucher.
| Route | Security+ | CySA+ |
|---|---|---|
| Voucher only, free or existing study material | $439 (Professor Messer publishes a free SY0-701 video course) | $439 (we found no free full course from a major provider) |
| CompTIA practice tests with voucher and retake | $593 | $593 |
| CompTIA e-learning (CertMaster Learn) with voucher and retake | $884 | $884 |
| Five-day class, first attempt | $2,495 (ONLC live online, voucher included) to $2,790 (Learning Tree, voucher included) | $2,934 (New Horizons $2,495 plus voucher) to $3,534 (Global Knowledge $3,095 plus voucher) |
Taking both on the cheapest paid route, the practice bundle twice, comes to $1,186 and gives you a retake on each exam. After that, each credential carries its own $150 renewal fee every three years.
Overlap, order and how much study each needs
The two exams cover some of the same ground, since security operations is the largest Security+ domain (28% of SY0-701). CySA+ goes much deeper into that one area and expects you to have done the work. That is why the common order is Security+ first, then CySA+ after a few years on the job. With Network+-level knowledge, our Security+ page estimates 6 to 8 weeks of study; for CySA+, with Security+ behind you and work with logs or alerts, it estimates 6 to 10 weeks.
Skipping Security+ is reasonable when you already work as an analyst: CompTIA asks for experience, not a certificate, before CySA+. If an employer or contract names Security+ specifically, take it anyway, because CySA+ is a different credential.
Common questions
- Is CySA+ harder than Security+?
- It is aimed at more experienced people: CompTIA recommends about four years of analyst work for CySA+, against about two years of security or systems administration for Security+, and the exam is nearly twice as long.
- Do I need Security+ before CySA+?
- No. CompTIA sets no prerequisite for either exam.
- Which costs less?
- Neither. Both vouchers cost $439 in the US in November 2026, and CompTIA's bundles cost the same for both.
- Should I wait for Security+ V8?
- Only if you will test later in 2027. SY0-701 stays available in English until June 11, 2027.
Security+ or CySA+ for your situation
- Help desk or junior admin, first security credential: Security+. If you are still building networking basics, see Network+ first.
- Systems or network administrator picking up security duties: Security+, which CompTIA ties to security administrator and systems administrator roles.
- SOC analyst with a couple of years of alert triage: CySA+ fits the work you already do; Security+ first only if your employer asks for it by name.
- Vulnerability management owner: CySA+, which covers scanning and the follow-up.
- Heading toward penetration testing: neither is the target; see PenTest+ or OSCP.
Full guides: Security+ and CySA+.
Next step
Ask which exam matches your experience
Sources
- CompTIA: Security+ V7 (SY0-701) exam details, voucher and bundle prices, checked November 5, 2026
- CompTIA: Security+ V8 (SY0-801) exam details, checked November 5, 2026
- CompTIA: CySA+ V4 (CS0-004) exam details, voucher and bundle prices, checked November 5, 2026
- CompTIA: continuing education renewal fees, checked November 5, 2026
- CompTIA: CEUs required for each certification, checked November 5, 2026
Prices are published list prices we recorded on the dates shown, not quotes. How we research.
Class prices come from the named providers, as listed and dated on the certification pages linked above.