CompTIA CySA+ credential artwork

CompTIA CySA+ (CS0-004)

Validates knowledge of security operations, including alert and log analysis, vulnerability prioritization, incident handling and reporting.

Summary

CompTIA CySA+ covers the analyst work of a security operations team, from reading alerts and logs to prioritizing vulnerabilities and handling incidents. It focuses on day-to-day detection and response skills rather than management or offensive testing.

Good fit if

  • You hold Security+ and want to specialize in defensive security
  • You want a SOC, vulnerability analyst or incident response role
  • Your target employer or DoD role lists CySA+

Look elsewhere if

  • You are new to IT or security: Security+
  • You want offensive security work: PenTest+
  • You lead security programs rather than analyze alerts: CISSP or CISM

Salary & jobs

Prerequisites

No required prerequisites.

Network+ and Security+ knowledge

Recommended

The networking and security fundamentals that CySA+ builds on.

4 years as a SOC or vulnerability analyst

Recommended

Hands-on work in security operations, such as a level 2 SOC analyst or vulnerability analyst role.

Cost

USD · US pricing
$439
A voucher with one retake (Retake Assurance) costs $579. Vouchers are valid for 12 months from purchase.

What holders say

Certification path

CompTIA puts Security+ before CySA+. After CySA+, CompTIA points to SecurityX or SecAI+.

CompTIA Security+ credential artwork
Security+Core cybersecurity skills
This certification
CompTIA CySA+ credential artwork
CySA+Security analysis and defense
CompTIA SecurityX credential artwork
SecurityXSecurity architecture and engineering
CompTIA SecAI+ credential artwork
SecAI+AI security skills

Renewal

CySA+ is valid for 3 years from the day you pass.

Validity
3 years
Renewal requirement
60 CEUs per cycle
Renewal fee
$150 USD

Renew with continuing education or by passing a higher CompTIA certification such as SecurityX. Passing a qualifying exam waives the CE fee.

CompTIA continuing education ↗

Alternatives

CompTIA PenTest+ credential artwork
PenTest+$439 required · Intermediate

The offensive counterpart, for penetration testing instead of defensive analysis.

GIAC Certified Incident Handler credential artwork
GCIH$999 required · Intermediate

GIAC's incident-handling credential, with hands-on CyberLive questions and optional SANS training.

Certified Ethical Hacker credential artwork
CEH$1,050 required · Intermediate

Ethical hacking credential from EC-Council, better known in offensive roles.

FAQ

Is CySA+ hard?

It is more scenario-based than Security+. Expect logs, scan results and incident situations where you choose the next step. Practical SOC or lab experience makes it noticeably easier.

Do I need Security+ before CySA+?

No. CompTIA recommends Network+ and Security+ knowledge and about four years of analyst experience, but you can book CySA+ directly.

Should I take CS0-003 or CS0-004?

Take CS0-004 unless you are already prepared for CS0-003 and can test before December 22, 2026. Both earn the same CySA+ certification.

Does CySA+ renew Security+?

Yes. Passing CySA+ renews Security+, Network+ and A+ if you hold them, and resets their expiry to match CySA+.

How long is CySA+ valid?

Three years. Renew with 60 CEUs and the CE fee, or by passing a higher CompTIA certification such as SecurityX.

Last updated October 2026