Overview
CompTIA CySA+ shows that a candidate can work as a security analyst, finding threats in security operations data, managing vulnerabilities, and handling incidents. CompTIA describes it as an intermediate-level, vendor-neutral certification. The exam blends multiple-choice and performance-based questions built around tasks an analyst performs in a security operations centre, from reviewing logs to reporting findings to stakeholders. It's analyst work.
Most candidates come to CySA+ after a few years in a SOC or vulnerability analyst role, and CompTIA recommends about 4 years of that experience. That isn't a formal prerequisite. CompTIA also states that CySA+ meets U.S. Department of Defense 8140 requirements. It sits above Security+ in CompTIA's renewal hierarchy, so renewing CySA+ also renews Security+. Compared with GIAC's GCIH, which centres on incident handling and attacker techniques, CySA+ gives more weight to vulnerability management and to reporting. The V4 exam launched on June 23, 2026. CompTIA lists the V3 English exam (CS0-003) as retiring on December 22, 2026, and its translations on March 23, 2027.
What the exam covers
The V4 exam (CS0-004) is organized into 4 domains with published weights.
| Domain | Weight |
|---|---|
| Security Operations | 34% |
| Vulnerability Management | 26% |
| Incident Response and Management | 24% |
| Reporting and Communication | 16% |
Requirements
There is no mandatory experience requirement. CompTIA recommends about 4 years in a SOC analyst or vulnerability analyst role.
- Format
- Multiple-choice and performance-based questions (exam CS0-004). English, with French, Japanese, Spanish, and Portuguese listed as coming soon
- Questions
- Maximum of 85
- Time
- 165 minutes
- Passing score
- 750 on a scale of 100 to 900
- Delivery
- Pearson VUE test centres or online with remote proctoring
No training prerequisite or endorsement is required. CompTIA states CySA+ meets U.S. Department of Defense 8140 requirements.
Cost
Exam fee: USD 439 (CySA+ exam voucher, CompTIA store). Price shown on CompTIA's North American store listing for CS0-004, checked 2026-10-12. A voucher with a retake is USD 579. Prices change and vary by region, so confirm on CompTIA's site.
Keeping it current
- Cycle
- 3 years
- Continuing education
- 60 continuing education units (CEUs) per cycle, or renew by passing the latest exam version, earning a higher-level CompTIA certification, or completing CompTIA CertMaster CE
- Fees
- USD 150 CE fee per 3-year cycle when renewing by uploading CEUs
How to verify that someone holds it
Each CompTIA certificate carries a verification code. An employer enters it on CompTIA's official certification verification page to see the certification status and achievement date, or checks the holder's Credly badge. Use the issuer’s verification page.
On InfoSecHub, a CySA+ listed on a profile shows Verified by Credly only when a current Credly badge issued to that person confirms it.
In Canada
CompTIA lists a French-language version of the V4 exam as coming soon, alongside Japanese, Spanish, and Portuguese.
Typical roles
- Security analyst
- SOC analyst
- Vulnerability analyst
- Incident responder
Related frameworks
Official resources
From CompTIA. Links open the issuer’s site.
- CySA+ official page, CompTIA
- CySA+ certification overview (V4 and V3), CompTIA
- Earn continuing education units (CEUs), CompTIAhandbook
- CompTIA certification verification, CompTIAverification
References
- CySA+ (V4) certification page, CompTIA
- CySA+ certification overview, CompTIA
- Continuing education renewal fees, CompTIA
- CompTIA continuing education program FAQ, CompTIA
- Earn continuing education units (CEUs), CompTIA
Reviewed 2026-10-12. Exam details, prices, and renewal rules change. Confirm them on the CompTIA website before you register. InfoSecHub is not affiliated with CompTIA.