Security+ vs Network+ vs CySA+: Which CompTIA Cert Should You Take First
Reach 50,000+ security professionals
Sponsor a newsletter slot and put your brand in front of CISOs, engineers, and IT decision-makers.
Take Security+ first if you are new to security, Network+ first if you are new to IT and weak on networking, and CySA+ only after you have some hands-on analyst experience. Security+, Network+ and CySA+ are all vendor-neutral CompTIA exams, but they target different roles: Security+ is the broad security foundation, Network+ is networking, and CySA+ is analyst-level security operations that recommends about four years of experience. This guide compares the three on format, scoring, domains and recommended experience using CompTIA's own certification pages, then maps common paths by role. CompTIA does not prescribe an order, so the recommendations here are our reasoning, not official guidance.
The Three Exams Side by Side
All three are vendor-neutral CompTIA exams, but they target different roles and different experience levels. The facts below come from CompTIA's certification pages. CySA+ V4 launched on June 23, 2026, so check that you are studying V4 (CS0-004) and not the retiring V3.
| Security+ | Network+ | CySA+ | |
|---|---|---|---|
| Current exam code | SY0-701 (SY0-801 expected around Nov 17, 2026) | N10-009 | CS0-004 |
| Questions | Maximum 90 | Maximum 90 | Maximum 85 |
| Length | 90 minutes | 90 minutes | 165 minutes |
| Passing score | 750 (100 to 900) | 720 (100 to 900) | 750 (100 to 900) |
| Focus | Core security concepts and operations | Networking concepts, implementation, operations, security and troubleshooting | Security operations, vulnerability management, incident response and reporting |
| Recommended experience | Two years as a security administrator (V8 page) | CompTIA A+ plus 9 to 12 months as a junior network administrator or support technician | About 4 years as a SOC analyst or vulnerability analyst |
CompTIA says Network+ N10-009 usually retires about three years after its June 2024 launch, with an estimated retirement in 2027. CySA+ V3 (CS0-003) is retiring: the English exam retires December 22, 2026.
How the Domains Differ
Security+ (SY0-701): General Security Concepts 12%, Threats, Vulnerabilities, and Mitigations 22%, Security Architecture 18%, Security Operations 28%, Security Program Management and Oversight 20%.
Network+ (N10-009): Networking Concepts 23%, Network Implementation 20%, Network Operations 19%, Network Security 14%, Network Troubleshooting 24%.
CySA+ (CS0-004): Security Operations 34%, Vulnerability Management 26%, Incident Response and Management 24%, Reporting and Communication 16%.
Security+ is broad and shallow across security topics. Network+ is deep on networking with security as one domain. CySA+ is narrow and deeper, focused on analyst work.
Briefings like this, every morning before 9am.
Threat intel, active CVEs, and campaign alerts, distilled for practitioners. 50,000+ subscribers. No noise.
Which Should You Take First?
CompTIA does not prescribe an order, so this is our reasoning from the experience recommendations and the domain content, not official guidance.
| Your situation | Start with | Why |
|---|---|---|
| New to IT, aiming for a security role | Security+ | It is the broadest security foundation and the most common credential named in junior security job listings |
| New to IT and shaky on networking | Network+, then Security+ | Security+ assumes you understand IP, ports and protocols, and Network+ builds that base |
| Already a network or systems administrator moving into security | Security+ | You already have the networking foundation, so go straight to security concepts |
| Working in or aiming for a SOC analyst role | Security+, then CySA+ | CySA+ recommends about 4 years of analyst experience, so it fits after you have hands-on time |
| Already a security analyst wanting a deeper credential | CySA+ | It targets the work you already do |
The one order we would avoid is taking CySA+ first with no security background. Its recommended experience is the highest of the three, and the exam is 165 minutes of analyst-level scenarios.
Common Paths by Role
| Target role | Typical sequence |
|---|---|
| SOC analyst | Security+, then CySA+ after hands-on SOC experience |
| Network or security administrator | Network+, then Security+ |
| Security generalist or IT support moving into security | Security+ first, then specialize |
| Penetration tester | Security+ for foundations, then a pentest-focused credential such as PenTest+ |
These are common patterns, not requirements. A job posting or employer program may specify a certification, and that requirement should win over any generic sequence. If you are unsure whether you need A+ or Network+ first, read do you need A+ or Network+ before Security+, and for networking basics use our OSI model and subnetting cheat sheet. For the advanced steps, see our guide to the CompTIA security certification path through CySA+, PenTest+ and SecurityX.
Studying More Than One
Studying two certifications at once is possible but splits your focus, so most people finish one exam before starting the next. If you do study more than one, keep separate progress and exam dates for each. DD Academy tracks each exam separately, with its own plan, flashcards and readiness score, and covers Security+, Network+, CySA+, PenTest+, SecurityX, CISA and CISSP. It is free to start on iPhone and the web.
The bottom line
Security+ is the usual first step into security, Network+ is the better first step if networking is your gap, and CySA+ fits after hands-on analyst experience. Check the current exam codes before you study, since CySA+ V4 is current and V3 is retiring, and defer to any certification your target employer specifies.
Frequently asked questions
Should I take Security+ or Network+ first?
If you are new to IT and shaky on networking, Network+ first builds the base Security+ assumes. If you already understand IP addressing, ports and protocols, start with Security+. CompTIA does not require an order, so choose based on your background and the job you want.
Can I take CySA+ without Security+?
Yes, CompTIA does not list Security+ as a prerequisite. CySA+ does recommend about 4 years of experience as a SOC analyst or vulnerability analyst, so most people take it after Security+ and some hands-on experience.
Is Security+ harder than Network+?
CompTIA does not publish difficulty comparisons. They differ in focus: Security+ is broad across security topics and Network+ goes deeper on networking. Which feels harder depends on your background, and Network+ has a lower passing score of 720 versus 750.
How long are the Security+, Network+ and CySA+ exams?
Security+ and Network+ are each 90 minutes with a maximum of 90 questions. CySA+ V4 (CS0-004) is 165 minutes with a maximum of 85 questions. All three mix multiple-choice and performance-based questions where CompTIA lists question types.
What is the passing score for each exam?
Security+ requires 750 on a scale of 100 to 900, Network+ requires 720 on the same scale, and CySA+ requires 750. These come from CompTIA's certification pages and can change, so confirm before you book.
Is the old CySA+ CS0-003 still available?
For now. CompTIA lists CySA+ V3 as retiring, with English learning products retiring November 22, 2026, the English exam retiring December 22, 2026 and translations on March 23, 2027. CySA+ V4 (CS0-004) launched June 23, 2026 and is the version to study.
What certification should I get for a SOC analyst job?
Security+ is the common starting credential for junior security roles, and CySA+ is the analyst-focused follow-up. Check the job listings you are targeting, because some employers name specific certifications and that requirement outweighs a generic sequence.
Sources & references
Free resources
Critical CVE Reference Card 2025–2026
25 actively exploited vulnerabilities with CVSS scores, exploit status, and patch availability. Print it, pin it, share it with your SOC team.
Ransomware Incident Response Playbook
Step-by-step 24-hour IR checklist covering detection, containment, eradication, and recovery. Built for SOC teams, IR leads, and CISOs.
Daily briefings + Google Top Stories in one step.
Enter your email and we'll subscribe you to the daily briefing and add Decryption Digest to your Google Search feed at the same time.
Founder & Cybersecurity Evangelist, Decryption Digest
Cybersecurity professional with expertise in threat intelligence, vulnerability research, and enterprise security. Covers zero-days, ransomware, and nation-state operations for 50,000+ security professionals every morning.
