IntermediateDefence and SOC

CySA+

CompTIA Cybersecurity Analyst · CompTIA

CySA+ certifies the skills of a security operations centre analyst: detecting and analysing threats, managing vulnerabilities, responding to incidents and reporting. It sits between Security+ and expert certifications and is recognised by the US DoD. Its strength is a clear focus on the SOC analyst’s job with scenario-based questions; its limit is that it is less known than Security+ in France, and simulated questions are no substitute for real experience with a SIEM.

Exam
CS0-004 (since 23 June 2026): up to 85 questions in 165 minutes, pass mark 750 on a 100-900 scale. The English CS0-003 remains available until 22 December 2026.
Exam price
$439US list price; €323 on CompTIA’s European store. Prices vary by country. Voucher with a retake (Retake Assurance): US$579.
Required experience
None required. CompTIA recommends about four years as a SOC or vulnerability analyst, with Network+ and Security+ or equivalent knowledge.
Validity and maintenance
Valid 3 years: 60 CEUs plus a US$150 continuing education fee per cycle, or pass the latest version or a higher CompTIA certification (no fee).
Format
Multiple choice and hands-on
Recognition
ISO/IEC 17024 accredited · DoD 8140 approved

Who is it for?

Junior to mid-level SOC analysts, incident responders and vulnerability management staff who already hold Security+ or equivalent knowledge.

Domains covered

  • Security operations: 34%
  • Vulnerability management: 26%
  • Incident response and management: 24%
  • Reporting and communication: 16%

Belinda’s take

Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.

Official site

The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.

All certifications

From theory to practice

So how does your system measure up?

Create your account and get an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Run the audit from your account: an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Belinda

Contact us

A question, a project, a partnership? Write to us: the team answers by email, usually within one business day.

Your details are only used to answer you. Do not include passwords or vulnerability details.