Side by side · CySA+ vs Security+
CySA+ vs Security+
Take Security+ first unless you already have several years of security work behind you. CompTIA describes Security+ as the baseline and CySA+ as the exam where you apply those concepts in operational environments (CompTIA FAQ, June 12, 2026). Both exams use the same 750-on-100–900 scale. CompTIA recommends about four years of hands-on analyst work for CySA+ (CS0-004) and Network+ plus two years for Security+ (SY0-701).
The two exams, line by line
| Point | CySA+ CS0-004 | Security+ SY0-701 |
|---|---|---|
| Issuer | CompTIA | CompTIA |
| Job it is built around≠ | SOC (security operations center) analyst, vulnerability analyst, incident responder | First security role; the foundational security exam |
| Questions≠ | Maximum of 85 | Maximum of 90 |
| Time≠ | 165 minutes | 90 minutes |
| Passing score | 750 on a 100–900 scale | 750 on a 100–900 scale |
| Recommended experience≠ | About 4 years hands-on, plus Network+ and Security+ knowledge; nothing required | Network+ and 2 years |
| US voucher price≠ | $425 (CompTIA, June 2026) | Current price: see the CompTIA store |
| Valid for | 3 years | 3 years |
| Renewal≠ | 60 CEUs and a $150 CE fee per cycle, or a single qualifying activity | 3 years via the CE program; also renewed by CySA+ |
| DoD 8140 work roles (per CompTIA)≠ | Nine roles, including 511, 531 and 541 | Shares 511, 531, 541, 461 and 612 with CySA+ |
| Next version≠ | No CS0-004 retirement date announced | SY0-801 launches Nov 17, 2026 |
Rows marked ≠ are where the two differ. Security+: CompTIA Security+ SY0-701 page. CySA+: CompTIA CySA+ V4 page and the June 12, 2026 FAQ. Renewal: CompTIA CE program FAQ. Work roles: CompTIA framework alignment. All checked October 2026. CE = continuing education; CEU = continuing education unit.
What each exam asks you to do
Security+ checks that you know what a control, a protocol or an attack is and where it belongs. CySA+ assumes that vocabulary and moves you into a security operations center (SOC) seat: the CS0-004 objectives split the exam into Security Operations (34%), Vulnerability Management (26%), Incident Response and Management (24%) and Reporting and Communication (16%), per the CS0-004 exam objectives (version 2.0, checked October 2026).
CompTIA's examples of what a CySA+ performance-based question (PBQ) may ask are all operational: analyze security information and event management (SIEM) alerts, review logs, investigate indicators of compromise, prioritize vulnerabilities and recommend remediation. The CySA+ study guide breaks each of those areas down by objective.
Where the clock difference comes from
CySA+ gives you 165 minutes for a maximum of 85 items; Security+ gives 90 minutes for a maximum of 90. Budget the extra time for reading: a CySA+ item often hands you a log excerpt, a scan report or an alert and asks for the next action. What makes CySA+ demanding has its own page; this comparison sticks to the published facts.
The usual order, step by step
Networking knowledge
Network+ or equivalent knowledge is in the recommended background for both exams, per CompTIA.
Security+
The baseline exam. SY0-701 is bookable in English until June 11, 2027; SY0-801 opens November 17, 2026.
Analyst work
Time in a SOC (level 2), vulnerability or incident-response seat is the background CompTIA has in mind for CS0-004; the experience row above gives the years.
CySA+
Book CS0-004; the CySA+ requirements page lists the background CompTIA recommends and the booking steps, and CySA+ study materials for CS0-004 compares the prep options.
One renewal for both
Renewing CySA+ also renews Security+, because CompTIA's continuing education (CE) hierarchy places CySA+ above it.
Version dates to plan around
Jun 23, 2026
CySA+ CS0-004 launches
The current CySA+ version, per CompTIA's V4 page.
Nov 17, 2026
Security+ SY0-801 launches
Same format as SY0-701 per CompTIA: maximum of 90 items, 90 minutes, 750 to pass.
Dec 22, 2026
CySA+ CS0-003 retires in English
Japanese, Portuguese and Spanish CS0-003 run until March 23, 2027.
Jun 11, 2027
Security+ SY0-701 retires in English
After this date only SY0-801 is bookable in English.
Skipping Security+ is allowedTip
CySA+ has no required prerequisite. CompTIA says going straight to CySA+ is “generally not recommended unless you already have substantial cybersecurity experience” (CompTIA FAQ, June 12, 2026). Going that way saves one exam fee and leaves Security+ off your record.
Choosing between the two
Will passing CySA+ renew my Security+?
Yes. In CompTIA's CE hierarchy CySA+ sits above Security+, and renewing the higher certification renews the lower one with no separate CE fee (CompTIA CE FAQ, checked October 2026).
Should I wait for Security+ SY0-801?
Pick by your study materials. SY0-701 stays bookable in English until June 11, 2027, and SY0-801 opens on November 17, 2026 (CompTIA Security+ pages, checked October 2026). Both lead to the same Security+ certification.
What will I pay for each voucher?
CompTIA states a US retail price of $425 for the CySA+ V4 voucher (CompTIA FAQ, June 12, 2026); prices vary by country. For the current Security+ price, see the CompTIA store. CySA+ details are on CySA+ exam cost.
What can I take after these two?
For analysts, the usual next steps are covered on cybersecurity analyst certifications; the offensive counterpart is compared on CySA+ vs PenTest+.
Sources
- CompTIA CySA+ V4 (CS0-004) exam page (checked October 9, 2026)
- CompTIA blog: The New CompTIA CySA+ (V4), Your Certification Questions Answered · price, prerequisites, Security+ as baseline; published June 12, 2026 (checked October 9, 2026)
- CompTIA Security+ V7 (SY0-701) exam page · questions, time, recommended experience, version dates (checked October 9, 2026)
- CompTIA CE program FAQ · renewal hierarchy (checked October 9, 2026)
- CompTIA framework alignment page · DoDM 8140.03 work roles (checked October 9, 2026)
Already past Security+?
Keep CS0-004 practice going between study blocks with the Triage Board app on your phone.