The short answer
Take Security+ (SY0-801) first if you want a broad security foundation or are early in your career. Take CySA+ (CS0-004) if you already work as a security analyst, or are close to it, and want to prove analysis and response skills. Many people do Security+ first and CySA+ later, but CompTIA does not make that a rule.
At a glance
| SY0-801 (Security+ V8) | CS0-004 (CySA+ V4) | |
|---|---|---|
| Level | Broad foundation | Intermediate, analyst focus |
| Audience | Security administrator, two years of hands-on experience recommended | About 4 years in a SOC analyst or vulnerability analyst role recommended |
| Coverage | Five domains across all of security | Four domains on operations, vulnerabilities, response and reporting |
| Questions | Maximum of 90 | Maximum of 85 |
| Time | 90 minutes | 165 minutes |
| Passing score | 750 on 100 to 900 | 750 on 100 to 900 |
| Languages | English | English; French, Japanese, Spanish and Portuguese listed as coming soon |
| Status | Expected on or around November 17, 2026 | Launched June 23, 2026 |
| Required prerequisite | None listed | None listed on the pages we checked |
| Renewal | Three-year cycle; Security+ FAQ lists 50 CEUs | Three-year cycle; 60 CEUs listed |
The CySA+ exam page does not list question types. CompTIA’s CySA+ objectives document describes multiple-choice and performance-based questions, as Security+ does.
What each exam covers
SY0-801: General Security Concepts (16%), Threats, Vulnerabilities, and Attacks (24%), Security Architecture (19%), Security Operations (27%) and Security Program Management and Oversight (14%). See the SY0-801 overview.
CS0-004: Security Operations (34%), Vulnerability Management (26%), Incident Response and Management (24%) and Reporting and Communication (16%). See the CS0-004 overview.
Overlap and differences
Both touch security operations, vulnerability handling and incident response. The depth differs.
Security+ asks you to recognize and choose: which control fits, what attack this is, which phase comes next. Questions are often short scenarios with a decisive detail.
CySA+ asks you to analyze: read the evidence, judge severity, decide what to do and report it. It spends 34% on security operations and adds a domain on reporting and communication, which Security+ has no equal for. Its recommended experience is about four years in an analyst role against two for Security+.
Security+ also carries material that CySA+ does not centre on: general cryptography, architecture models, and governance and program management (domain 5).
How to choose
- You are new or changing careers: SY0-801. CySA+ assumes you can already work in a SOC or with vulnerability data.
- You are an analyst with several years of experience: CS0-004 may fit better, and the Security+ foundation may feel basic.
- You want a clear learning path: Security+ then CySA+ gives the broad view first and the analyst depth second.
- A job post decides it: follow the post, and check which version it accepts.
Time and effort
CySA+ allows 165 minutes, nearly twice the time for Security+. That reflects longer scenarios and analysis tasks. Do not treat it as a sign that CySA+ is easy to pace. Practice reading logs and long scenarios if you aim for it. For Security+, practice speed across a wide range of topics. See is SY0-801 hard.
Renewal
Both credentials use a three-year cycle with continuing education. CompTIA lists 50 CEUs for Security+ and 60 for CySA+. CompTIA’s pages also list earning a higher-level CompTIA certification as a renewal option, but we have not seen a page that states which certification renews which. Check before you plan around it. See SY0-801 renewal and retakes.
FAQ
Is CySA+ the next step after Security+?
It is a common next step for analysts, though CompTIA does not require Security+ first.
Can I skip Security+?
Yes, if no role asks for it and you have the experience. CompTIA lists no prerequisite for CySA+ on the pages we checked.
Which is more useful for a SOC job?
CySA+ is closer to analyst work. Check what your target employers ask for.
More guides for SY0-801
- SY0-801 Exam Format, Length and Scoring
- SY0-801 Study Plan: 4-Week and 8-Week Options
- SY0-801 Domains Explained With Examples
- SY0-801 Sample Questions With Explanations
- Is SY0-801 Worth It? An Honest Look
- SY0-801 Cheat Sheet: Key Facts to Review
- SY0-801 vs CY0-001: Which Exam First?
- N10-009 vs SY0-801: Which First?
Next step
Start with the SY0-801 overview or the prerequisites to see where you stand. For practice, the SY0-801 practice tests and the CS0-004 practice tests are there when you are ready.