CompTIA Security+ is a globally recognized cybersecurity certification that helps you build and prove you have the practical, hands-on skills employers value. You’ll learn to protect systems and data, respond to real-world threats, and perform core security functions, helping you open doors to a career in cybersecurity and the opportunities ahead. Security+ V8 is expected to launch on or around November 17, 2026.
V8
Security+ V8 (Coming November 2027)
Skills you'll learn
Build skills with CompTIA learning and validate them with Security+ certification.
Apply layered security controls, Zero Trust principles, access management, and cryptographic technologies.
Identify threat actors, attack techniques, vulnerabilities, and indicators of malicious activity, including AI-related risks.
Protect cloud, hybrid, on-premises, and connected environments while supporting resilience and business continuity.
Use monitoring, vulnerability management, security tools, automation, and operational security practices to help defend modern environments.
Manage authentication, authorization, federation, multifactor authentication, and secure access controls.
Detect, respond to, and investigate security incidents using logs, alerts, and security data.
Apply security policies, risk management practices, compliance requirements, audit concepts, and security awareness programs.
Stay informed
Advance with confidence
Get updates, insights, and exclusive offers to support your learning journey and career growth.
Exam details
Exam version: V8
Exam series code: SY0-801
Launch date: November 17, 2026
Number of questions: Maximum of 90, a mix of multiple-choice and performance-based questions
Duration: 90 minutes
Passing score: 750 on a scale of 100 to 900
Languages: English
Recommended experience: Security administrator with two years of hands-on experience
Accreditation and benefits: ISO 17024 accredited through ANAB
Retirement: Estimated 3 years after launch
Explore learning and practice solutions for your skill-building and exam preparation needs
No matter where you are in your journey, CompTIA’s CertMaster products deliver flexible learning and practice experiences to help you build skills, boost confidence and achieve Security+ exam readiness.
| Perform | Learn | Practice | Labs | |
| Best for: |
Best for those looking to build skills, learn concepts, and gain hands-on experience. No prior related job role experience needed. |
Best for those building foundational knowledge and skills. No prior related job role experience needed. |
Best for those having experience with the skills and concepts. |
Best for those looking to gain hands-on experience applying skills. |
| Primary purpose: |
Comprehensive learning with robust set of lab activities in real and simulated environments to practice skills and job readiness. |
Comprehensive learning with lab activities to practice skills. |
Confirm exam readiness and close gaps. |
Apply skills in real-world scenarios. |
| Contains: |
Instructional content, video, interactives, labs (simulated and live virtual machines), assessments, practice tests |
Instructional content, video, interactives, labs (simulated), assessments, practice tests |
Timed practice exams, objective quizzes, exam objective mastery scores |
Live virtual lab environment with guided tasks and real world-scenarios |
| Estimated duration: |
30–60 hours |
25–40 hours |
10–20 hours |
15–25 hours |
Security+ (V8) exam objectives summary
General Security Concepts (16%)
- Compare and contrast various types of security controls: Understand how layered security controls work together to protect systems and data.
- Demonstrate the impact of change management processes on security: Understand how planning, testing, approvals, and documentation help maintain secure environments.
- Explain the importance of using appropriate cryptographic solutions: Apply encryption, certificates, hashing, digital signatures, and key management practices.
Threats, Vulnerabilities, and Attacks (24%)
- Compare and contrast common threat actors and motivations: Understand who conducts attacks and why organizations are targeted.
- Explain common threat vectors and attack surfaces: Identify how attacks target users, systems, applications, networks, cloud resources, and supply chains.
- Analyze indicators of malicious activity: Recognize signs associated with malware, social engineering, credential attacks, and other security threats.
- Examine common vulnerabilities and associated risks: Evaluate vulnerabilities and help determine mitigation priorities.
- Explain the security risks associated with artificial intelligence (AI): Identify risks related to AI systems, models, prompts, privacy, and data exposure.
Security Architecture (19%)
- Compare and contrast security implications of different architecture models: Understand security considerations across cloud, hybrid, on-premises, and operational technology environments.
- Apply security principles to secure enterprise infrastructure: Support secure system design, access controls, segmentation, and connectivity.
- Understand concepts related to data protection: Protect sensitive information throughout its lifecycle.
- Explain the importance of resilience and recovery in security architectures: Support continuity through backups, redundancy, recovery planning, and testing.
Security Operations (27%)
- Apply common security techniques to computing resources: Help secure endpoints, networks, applications, and data.
- Explain asset management concepts and practices: Manage hardware, software, and data assets throughout their lifecycle.
- Analyze indicators of vulnerabilities and implement appropriate mitigation strategies: Identify, prioritize, remediate, and validate vulnerabilities.
- Describe security monitoring and alerting concepts: Use logs, alerts, dashboards, and security tools to identify potential threats.
- Manage identity and access controls: Support authentication, authorization, federation, and privileged access management.
- Explain the importance of automation and orchestration in security operations: Improve efficiency through automation, integrations, and AI-assisted workflows.
- Implement incident response activities: Support preparation, detection, containment, recovery, and lessons learned.
- Use data sources to support investigations: Analyze evidence and security data during investigations.
Security Program Management and Oversight (14%)
- Define elements of an effective security governance program: Apply policies, standards, procedures, and security guidance.
- Manage security risk management processes and concepts: Assess, communicate, and manage organizational risk.
- Explain third-party risk management concepts: Evaluate and monitor vendor and partner security risks.
- Support security compliance and privacy considerations: Support regulatory, legal, compliance, and privacy requirements.
- Compare and contrast audits and assessments: Participate in audits, reviews, testing, and assessments.
- Promote security awareness practices: Help strengthen organizational security through education and awareness.