Skip to main content

Classroom mode. Nothing is saved to this machine and no personal detail is asked for.

Leave classroom mode
Back to certifications

CompTIA · Cybersecurity

CySA+

Develop skills in threat detection, analysis and incident response.

View certification details
Understand the subject

Develop skills in threat detection, analysis and incident response.

Apply it to the work

Useful in a SOC or vulnerability team when you must decide which evidence matters, what to investigate next and how to explain the result.

Build practical evidence

Know your way around logs and basic network traffic. Work through an investigation and write down why you escalated or closed it.

What you will learn to do

Understand the subject

Develop skills in threat detection, analysis and incident response.

Apply it to the work

Useful in a SOC or vulnerability team when you must decide which evidence matters, what to investigate next and how to explain the result.

Build practical evidence

Know your way around logs and basic network traffic. Work through an investigation and write down why you escalated or closed it.

Certification essentials

Requirements, costs and keeping it current.

Check the vendor record and ongoing commitment alongside the career guidance.

Pricing view
Market

Vendor record

Live

V4 (CS0-004) launched on 23 June 2026. The V3 exam (CS0-003) retires in English on 22 December 2026, with the Japanese, Portuguese and Spanish versions following on 23 March 2027. Book V4 unless you are already deep into V3 material.

Source: CompTIA · Read 17 September 2026

Sourced fields only; this does not mean every exam detail has been verified. Pricing and renewal policies have their own sources and check dates. Confirm the currency, tax and final booking total with the vendor.

Role-fit guidance is TechWaymark editorial interpretation. It is separate from the recorded vendor facts and does not measure hiring outcomes.

Costs and renewal

Exam cost
£274
Exam format
Exam format not yet verified — check the vendor's exam page
Keeping it current

Renew every 3 years with 60 continuing education units (CEUs) and the CE programme fee, or an eligible exam.

Renewal sources & exceptions

The CEU route costs US$150 in CE fees per 3-year cycle, not an annual fee. Passing the latest exam or an eligible higher CompTIA certification can renew without a separate CE fee; exam or course costs still apply. Check which lower certifications are covered.

Renewal policy checked 2026-09-28. Check the linked provider policy for current fees and eligibility.

UK storefront exam voucher only, quoted in GBP. Confirm VAT and the final booking total; training, retake assurance and renewal fees are separate. Vendor price checked 2026-09-24. Check the vendor record before booking.

Current vendor pricing source ↗
Preparation and practical skills

Recommended prior knowledge

  • Security+ knowledge
  • Hands-on log analysis

Common misconceptions

  • CySA+ may meet a named requirement; it does not guarantee shortlisting or replace documented work.

What this cert does NOT guarantee

  • Guaranteed interviews, a salary increase or proof of production experience.
Alternatives and related certifications

Where this fits

  • None required
This cert
CySA+
  • Top of this lane

Alternative routes

No single right path. These adjacent options reach similar roles.

  • GCIA
    Common follow-on or adjacent credential, see the graph for full lineage.
  • BTL1
    Common follow-on or adjacent credential, see the graph for full lineage.

Adjacent & overlapping

  • GCIA
  • BTL1
Career outcomes and limitations

Realistic first roles

Security analysis and defensive operations

How people actually get here

    Real-world career variations

    Timeline expectations

    1. Months 0–2Foundation reading, concepts, vocabulary.
    2. Months 2–4Hands-on labs, documented home projects.
    3. Months 4–6Practice exams, weak-area drills, exam.
    4. Post-examUse target vacancies to guide applications and projects. There is no guaranteed time to a first role.

    Study resources

    Study options

    Choose the right mix for your goals and experience. Links below go to official and third-party resources.

    Guided study

    Structured resources from established providers can help build knowledge and skills.

    Compare study options →

    Third-party providers. Commercial terms, pricing and availability apply.

    Practice environments

    Explore suitable environments for practical work. Check the tools, features and access you need.

    Compare practice resources →

    External resources. Check current costs and access requirements.

    Resources are selected for relevance. Compare access, syllabus coverage and total cost; a listing does not imply a commercial partnership.

    Compare the resources for CySA+
    CourseProvider source

    CompTIA CertMaster Learn CySA+

    Reading + interactive

    Check the resource provider for current local pricing
    View resource
    LabProvider source

    CompTIA CertMaster Labs CySA+

    Hands-on

    Check the resource provider for current local pricing
    View resource
    PracticeProvider source

    CompTIA CertMaster Practice CySA+

    Quiz

    Check the resource provider for current local pricing
    View resource

    Check the current syllabus, access terms and total cost before choosing. Resource inclusion does not guarantee exam success.

    Optional home projects

    Build something you can explain.

    Ideas to explore after choosing a certification, using your own tools and keeping evidence of your work.

    Example project evidence
    Project evidence map (example)
    Synthetic event sampleScope and inputs
    Detection query or ruleDecisions and reasoning
    Tuning comparisonChecks and limitations
    Evidence record (example)
    Test caseExpected behaviourRecord
    Repeated failures followed by a successInvestigate the sequence with user and source contextThe matching events and your explanation

    Tune an alert using event data

    A sign-in alert creates too many cases. Analysts need to reduce avoidable noise without losing a deliberately planted suspicious sequence.

    Local lab Your own tools Evidence guidance
    View project guide
    Track this certification

    Editorial route and career guidance. No separate external evidence review is recorded for this assessment.

    Editorial evidence review: pending · UK market. Vendor facts and prices elsewhere on this page have their own sources and check dates.