SecurityMocks

CompTIA Security+ explained

What is Security+? The certification explained for 2026

CompTIA Security+® is a vendor-neutral cybersecurity certification you earn by passing one exam. It shows employers you can handle core security work, it stays valid for three years, and the US Department of Defense approves it for many cyber roles. Below: who it suits, how the exam works and every step through to renewal.

Written by the SecurityMocks team with AI assistance and checked against the sources below. Last reviewed 7 November 2026.

Take a free practice test See the steps
  • 1 exam
  • Up to 90 questions
  • 90 minutes
  • 750 to pass
  • Valid 3 years

The short answer

What is Security+ certification?

Security+ is CompTIA’s certification for core, hands-on security skills. There’s no course to finish and no application to file: pass one exam and you’re certified for three years. CompTIA describes it as vendor-neutral, so it isn’t tied to one company’s products.

Security+ at a glance. From CompTIA’s certification, help and policy pages, checked 7 November 2026.
QuestionAnswer
Who awards it?CompTIA, the IT certification body that also runs A+, Network+ and CySA+.
How do you earn it?Pass one exam. You don’t need a course, a degree or another certification first.
Which exam?SY0-701 (V7), available in English until 11 June 2027, or SY0-801 (V8), launching on or around 17 November 2026. Either one earns Security+.
What does it prove?That you can apply core security skills: spotting threats, securing systems and networks, running day-to-day security operations and supporting risk and compliance work.
Is it accredited?Yes, through ANAB, to ISO/IEC 17024, the international standard for bodies that certify people.
Who recognizes it?Employers hiring for security and IT roles, and the US Department of Defense, whose DoD 8140 qualification matrix (version 3.0, October 2026) lists it for 30 cyber work roles.
How long does it last?Three years from the date you pass. Then you renew it or let it lapse.
What do you get?A record in your CompTIA account and a digital badge you claim on Credly.

What Security+ isn’t

Six common mix-ups, cleared up.

  • Mix-up 1

    A degree or a course

    It’s an exam-based credential. How you prepare is up to you: books, videos, labs or practice tests.

  • Mix-up 2

    A product certification

    It doesn’t train you on one vendor’s firewall or cloud. The skills carry across tools.

  • Mix-up 3

    A security clearance

    A clearance is a separate government process. A defense job ad may ask for both.

  • Mix-up 4

    Permanent

    It expires three years after you pass unless you renew it.

  • Mix-up 5

    A pure memory test

    Alongside multiple choice, it has performance-based questions that ask you to solve a problem.

  • Mix-up 6

    A US-only credential

    CompTIA offers it worldwide, and SY0-701 runs in five languages.

Prerequisites and eligibility

Who Security+ is for, and what you need first

Anyone can book the exam. CompTIA sets no education, training or certification prerequisites and no minimum age. What it does publish is recommended experience, and that tells you who the exam is written for.

  • 0Prerequisites. No education, training or certification is required to book the exam.
  • 2yrsHands-on experience as a security administrator: what CompTIA recommends for SY0-801.
  • 1certNetwork+, which CompTIA recommends before SY0-701, together with two years in a security or systems admin job.
  • 13+The age CompTIA recommends. There’s no formal minimum, but minors need parental consent first.

Where are you starting from?

Find your row. It tells you where you stand and where to begin.

How your background maps to Security+. Our guidance, built on CompTIA’s recommended experience and candidate policies.
If you are…Where you standA sensible first move
A security or systems administrator with two or more yearsYou match the candidate CompTIA writes for. Your gaps will be in topics your job doesn’t touch.Take a timed mock cold, then study only your weakest domains.
In IT support or on a help deskYou can book now, but you’re short of the two years of security experience CompTIA recommends.Study one domain at a time, starting with the weakest on your baseline test.
New to IT, changing careersThe exam assumes networking basics such as ports, protocols and IP addressing. Expect a longer runway.Learn networking fundamentals first, or take Network+, which CompTIA recommends before SY0-701.
A student or under 18You can sit the exam. CompTIA recommends candidates be at least 13.Since 23 June 2026, minors need parental consent through CompTIA Central before booking. Set that up first.

Which domains will feel hardest from your background, and whether it suits beginners: how hard Security+ is.

November 2026 to June 2027

SY0-701 or SY0-801: which Security+ exam to take

From on or around 17 November 2026 until 11 June 2027, you can take either version in English. Both earn the same Security+ certification in the same format, so the choice comes down to which content you study. Dates from CompTIA’s V7 and V8 pages, checked 7 November 2026.

Which version fits your timeline?

SY0-801

Starting now, or testing after 11 June 2027

Study the new content. CompTIA estimates SY0-801 will stay available for about three years after launch. It launches in English only.

SY0-701

Most of the way through SY0-701

Finish it, and book early enough that a retake still fits before 11 June 2027. In Japanese, Portuguese, Spanish or Thai, SY0-701 runs until 13 August 2027.

A standard voucher works for either version, according to CompTIA’s help center; the retake in Retake Assurance doesn’t. Every scenario, plus what changed: the SY0-801 vs SY0-701 decision table. Staying on the older exam: the SY0-701 guide.

From zero to certified

How to get Security+ certified, step by step

Eight steps, in order, each linked to the page that covers it in depth.

Before exam day

Choose, measure, study, rehearse.

  1. Pick your version

    Use the two paths above. If you’re starting now and unsure, choose SY0-801.

  2. Take a baseline test

    Sit a timed, full-length test before studying to find your weakest domains. Our free Security+ practice test is a 90-question SY0-801 mock.

  3. Study the five domains

    Work from the objectives, weakest domain first. The Security+ study plan has week-by-week tracks for different starting points.

  4. Rehearse under the clock

    Take full-length SY0-801 practice exams in exam mode. Estimated scores clear of 750 on two different mocks are a fair signal to book, though they’re still estimates.

Booking, test day and after

Pay, book, sit, collect.

  1. Buy a voucher

    $439 at CompTIA’s US store, or $579 with Retake Assurance (V7 vouchers, checked 7 November 2026). A voucher is valid for 12 months from purchase. See Security+ exam cost and vouchers.

  2. Book with Pearson VUE

    Schedule from your CompTIA account, at a Pearson VUE test center or online through OnVUE. Read up on taking Security+ online.

  3. Sit the exam

    Up to 90 questions in 90 minutes, with a score report as soon as you finish. Didn’t pass? You can retake once straight away; after that, attempts must be at least 14 days apart.

  4. Collect your certification

    Your result reaches your CompTIA account within five business days, and an email invites you to claim your Credly badge. The three-year clock starts on your exam date.

A worked example with real dates

Say you pass SY0-801 on Monday 15 March 2027. With CompTIA’s five-business-day window, the result should be in your account by Monday 22 March. Your renewal deadline is 15 March 2030, because CompTIA counts the three years from your exam date.

One candidate’s three-year cycle

  1. 15 Mar 2027 · pass
  2. 22 Mar 2027 · record shows
  3. 15 Mar 2030 · renew by

Exam format and domains

What’s on the Security+ exam

SY0-801 has at most 90 questions, a mix of multiple choice and performance-based questions, and you get 90 minutes. You need 750 on a scale of 100 to 900. The content is split into five domains, weighted as below.

SY0-801 domain weights from CompTIA’s V8 page, checked 7 November 2026. The descriptions are our own summaries.
DomainWeightWhat it covers, in plain termsPractice
1. General Security Concepts16%Kinds of security controls, how change management affects security, and choosing the right cryptography.Domain 1 questions
2. Threats, Vulnerabilities, and Attacks24%Who attacks and why, how attacks get in, signs that one is under way, and the new risks that come with AI.Domain 2 questions
3. Security Architecture19%Securing cloud, on-premises and hybrid designs, protecting data wherever it lives, and staying resilient.Domain 3 questions
4. Security Operations27%Hardening, asset and vulnerability management, monitoring, identity, automation, incident response and investigations.Domain 4 questions
5. Security Program Management and Oversight14%Governance, risk, vendors and partners, compliance, audits and security awareness.Domain 5 questions

Going deeper: the hands-on performance-based questions, how the 750 passing score works on a scaled range, and the full Security+ exam objectives as a checklist.

What Security+ leads to

After you pass: validity, renewal, DoD and careers

Passing starts a three-year cycle. Here’s what comes next, in brief; each topic has its own guide.

Valid for three years, then renew

Earn 50 continuing education units and pay CompTIA’s $150 CE fee within the cycle, pass the newest Security+ exam, or earn a higher-level CompTIA certification.

Security+ renewal and CE

Recognized by the US Department of Defense

Version 3.0 of the DoD 8140 qualification matrix (October 2026) lists Security+ for 30 work roles under DoD Manual 8140.03, which superseded the older 8570 manual; CompTIA’s own page still lists 20. Whether it covers a particular job depends on the work role and level in the posting.

DoD 8140 and Security+

Jobs it supports

CompTIA links Security+ to roles such as security analyst, security engineer and systems administrator, and its career map runs on to penetration tester and IT manager. Pay depends on the role, location and experience.

Security+ salary and jobs

Where to go next

In CompTIA’s security track, CySA+ and PenTest+ sit above Security+, with SecurityX at the top. Earning any of them also renews your Security+.

CompTIA certification path

CompTIA’s security track, first to most advanced

  1. A+
  2. Network+
  3. Security+
  4. CySA+ or PenTest+
  5. SecurityX

The order comes from CompTIA’s renewal hierarchy, where each higher certification renews the ones below it.

FAQ

What is Security+? Common questions

What is CompTIA Security+ used for?

It shows employers you have core, hands-on security skills, and job ads for security analyst, security engineer and systems administrator roles may ask for it. In the US, version 3.0 of the DoD 8140 qualification matrix lists it for 30 Department of Defense cyber work roles; see which DoD work roles list Security+.

Is Security+ good for beginners?

Beginners can take it, since there are no prerequisites, but CompTIA writes SY0-801 for people with about two years of hands-on security experience. If you’re new to IT, learn networking basics first and allow a longer study plan. A timed practice test early on shows how far you have to go.

Are there any prerequisites for Security+?

No. CompTIA requires no education, training or other certification, and it has no minimum age, though it recommends candidates be at least 13. It does recommend experience: two years as a security administrator for SY0-801, or Network+ plus two years in a security or systems administrator job for SY0-701.

How do I get my Security+ certification?

Choose SY0-701 or SY0-801, study the five domains, practice with timed full-length tests, then buy a voucher and book the exam with Pearson VUE through your CompTIA account. Score 750 or more on the 100–900 scale and you’re certified for three years.

How long does it take for a CompTIA certification to show up?

Up to five business days. CompTIA says your exam result will appear in your certification account within that window, and you’ll also get an email inviting you to claim your digital badge on Credly. If nothing has appeared after five business days, contact CompTIA support.

Does Security+ expire?

Yes, three years after the date you pass, unless you renew it with continuing education units, a newer Security+ exam or a higher-level CompTIA certification such as CySA+. If it lapses past CompTIA’s 30-day grace period, you have to pass the current exam again. Our guide to renewing Security+ compares the routes and costs.

See where you stand before you book

Mock Test 1 is a free, full-length SY0-801 practice exam: 90 questions, 90 minutes, an estimated score on the 100–900 scale and every option explained.

Start free Mock Test 1 Practice questions by domain
Illustration of a winding path climbing a hill to a flag at the summit

Sources

Sources

Every fact on this page that can change was checked on these pages on 7 November 2026.

  1. CompTIA: Security+ certification overview
  2. CompTIA: Security+ V8 (SY0-801) exam details
  3. CompTIA: Security+ V7 (SY0-701) exam details and store prices
  4. CompTIA Help: prerequisites and age requirements
  5. CompTIA: Candidate ID Policy
  6. CompTIA Help: using a voucher on a different exam version
  7. CompTIA: Voucher Terms and Conditions
  8. CompTIA Help: how to schedule your exam
  9. CompTIA: Candidate Testing Policies
  10. CompTIA: Certification Retake Policy
  11. CompTIA Help: when exam information appears in your account
  12. CompTIA: certification digital badges
  13. CompTIA: CE renewal cycle
  14. CompTIA: earning CEUs
  15. CompTIA: CE renewal fees
  16. CompTIA: Certification Renewal Policy
  17. CompTIA: renewing multiple certifications
  18. DoD 8140 qualification matrix v3.0 (spreadsheet dated 5 October 2026, posted 23 October 2026; lists Security+ for 30 work roles)
  19. CompTIA: certification alignment to DoDM 8140.03 work roles
  20. DoD Manual 8140.03, Cyberspace Workforce Qualification and Management Program (effective 15 February 2023; cancels DoD 8570.01-M)
  21. CompTIA blog: what 8140 means for companies working with DoD (13 December 2024)
  22. CompTIA blog: Security+ as a vendor-neutral certification (24 January 2025)