Security+ vs CySA+: Foundation or Analyst, and Which to Take First in 2026
Skip the comparison - test the foundation first
A complete Security+ SY0-701 practice exam: 90 questions in 90 minutes, interactive PBQs graded outcome by outcome and an Exam Coach report at the end.
SECPLUS-EXAM-FULL
Try a free Security+ exam
Already have an account? Log in to redeem
Security Operations
Follow the evidence. Contain the incident.
A finance user opened an invoice attachment. Something followed.
Incident response
Run the response in the right order.
Files on a shared drive are being renamed with a strange extension.
Security Operations
Restore access. Keep the boundary.
A rushed change has taken the customer portal offline. Repair the firewall rules.
PBQs from the Security+ pack, each graded outcome by outcome. The free full-length exam includes PBQs like these.
Security+ is the foundation security certification (up to 90 questions in 90 minutes, $439); CySA+ (CS0-004) is the analyst specialisation (up to 85 questions in 165 minutes, $439) focused on detection, vulnerability management and incident response. Take Security+ first unless you already work as an analyst; CompTIA recommends about four years in a SOC or vulnerability analyst role for CySA+. Earning CySA+ renews Security+. Security+ moves to SY0-801 on 17 November 2026.Exam facts checked against CompTIA's pages on 12 October 2026.
In this guide
Security+ and CySA+ side by side
| Security+ | CySA+ | |
|---|---|---|
| Current exam | SY0-701 (SY0-801 from 17 November 2026) | CS0-004, launched 23 June 2026 |
| Previous version | SY0-701 retires 11 June 2027 (English) | CS0-003 retires 22 December 2026 (English) |
| Price | $439 | $439 |
| Questions and time | Up to 90 in 90 minutes | Up to 85 in 165 minutes |
| Passing score | 750 / 900 | 750 / 900 |
| CompTIA recommends | Network+ and two years as a security or systems administrator | About four years as a SOC or vulnerability analyst |
| Level | Foundation: the first security certification | Intermediate: the analyst specialisation |
| Renewal | 3 years; 50 CEUs | 3 years; renewing CySA+ also renews Security+ |
From CompTIA's Security+ and CySA+ pages and list prices, checked 12 October 2026.
What each one actually tests
Security+ covers the whole field
- Threats, attacks and the controls that stop them
- Security architecture, cryptography and identity
- Security operations and incident response basics
- Governance, risk and compliance
CySA+ goes deep on the analyst's job
- Reading logs and alerts to detect what is happening
- Vulnerability management: scanning, prioritising, remediating
- Incident response from detection to reporting
- Longer, scenario-heavy questions: 165 minutes for up to 85
Which to take
- Security+ first for almost everyone. It is the baseline security certification, it is what entry-level security and many government roles ask for, and CySA+ assumes its content.
- CySA+ next once you work, or want to work, in a security operations centre or on vulnerability management. CompTIA pitches it at around four years in an analyst role.
- Straight to CySA+ only if you already have the experience and the Security+ knowledge; it is not a formal prerequisite.
The rest of the ladder (PenTest+, SecurityX): CompTIA certification path.
Two version changes to plan around
Security+ moves to SY0-801 on 17 November 2026; SY0-701 stays bookable in English until 11 June 2027. CySA+ moved to CS0-004 on 23 June 2026; CS0-003 retires in English on 22 December 2026. If you hold an older study set for either, check the exam code before you book. Security+ details: SY0-801 changes and Security+ exam cost and format.
Practising for each
FigigExams covers Security+: a complete 90-question SY0-701 exam with interactive PBQs is free, and the pack is $39 once for 4 exams, 357 questions and 17 PBQs. We do not cover CySA+. For the rest of the Security+ stack: best Security+ study resources.
Find out if you are ready for Security+
90 questions with interactive PBQs and an Exam Coach report that ranks your weakest domains. Free, no credit card.
Try a free Security+ examThe full Security+ pack is $39 once: 4 exams, 357 questions and 17 interactive PBQs, lifetime, future versions included.
Frequently asked questions: Security+ vs CySA+
Should I take Security+ or CySA+ first?
Security+ first for almost everyone. It is the foundation certification and CySA+ assumes its content. CySA+ is the next step once you work, or want to work, as a security analyst.
Is CySA+ harder than Security+?
Yes. CySA+ goes deeper on detection, vulnerability management and incident response, with longer scenario questions: up to 85 in 165 minutes. CompTIA recommends about four years of analyst experience for CySA+, against two years of administration for Security+.
Does CySA+ renew Security+?
Yes. Under CompTIA's continuing education programme, earning or renewing a higher-level certification such as CySA+ renews the lower-level certifications you hold, including Security+.
What is the current CySA+ exam?
CS0-004, launched on 23 June 2026. The previous exam, CS0-003, retires in English on 22 December 2026.
How much do Security+ and CySA+ cost?
$439 each at CompTIA's US list price, checked October 2026.