SecAI+ vs Security+: Which One Do You Need?
Since the day CompTIA announced SecAI+, I've had the same question again and again: do I take SecAI+ vs Security+, do I need both, or can I skip one? It's a fair question. Both carry the CompTIA name, both have "Sec" in the title, and from the outside they look like two versions of the same thing.
They aren't. Security+ is the broad foundation of cyber security. SecAI+ is about one specific, fast-growing job: securing AI systems, and using AI for security work. Think of Security+ as learning to drive, and SecAI+ as learning to drive an electric car with self-driving features. You want the first before the second.
I went through the official exam objectives for both, side by side. Below you'll find the full comparison, which one to take first for your situation, and my honest view on whether SecAI+ is worth the money.
Updated since the video
Two things have changed since I recorded the video above. CompTIA's prices have moved: when I checked in October 2026, the US list price was $439 for Security+ and $298 for SecAI+ (the video says $425 and $359). CompTIA changes its prices and runs offers, so always check the current price before you buy. And the next Security+ exam, SY0-801, launches on or around 17 November 2026 with a new objective on AI risks. This page uses the current prices and covers SY0-801. Where the video and this page differ, this page is current.
TL;DR: if you've only got 30 seconds
Security+ is the foundation. Broad security knowledge, asked for by most entry-level jobs and on the DoD 8140 list.
SecAI+ is the specialisation. 40% of the exam is securing AI systems: prompt injection, data poisoning, model theft.
Take Security+ first, then SecAI+. If you already use AI tools at work, take SecAI+ now.
Both together cost about $737 at US list price (October 2026; prices change). Discounted vouchers bring that down.
Pass, and your training is free. Our Security+ and SecAI+ training bundles are refunded when you pass within 4 months (voucher bought through StationX).
SecAI+ vs Security+ at a Glance
Start with the hard facts. These come straight from CompTIA's official Security+ and SecAI+ pages, checked in October 2026.
Source: comptia.org, October 2026. *Prices change and vary by country. Security+ moves to SY0-801 (same format) from 17 November 2026.
Look at the recommended experience row. Security+ is aimed at someone near the start. SecAI+ expects you to have been working in security for a couple of years. Same brand, different person.
For Less.
StationX is a CompTIA Authorized Partner. The same official exam vouchers you'd buy from CompTIA, for less.
CompTIA price USD 439.00
CompTIA price USD 298.00
Today's US prices against CompTIA's US list price. Prices change and vary by country; the voucher page shows yours.
So what exactly is SecAI+?
What Is CompTIA SecAI+ (CY0-001)?
CompTIA SecAI+ is CompTIA's first "expansion" certification. That word matters. An expansion cert doesn't replace an existing one. It sits alongside it and adds a specialism on top.
Why build it now? Because AI arrived in security teams faster than the training did. CompTIA's own research found 45% of firms report skills gaps in using AI tools. Here's what that looks like in real life: an analyst pastes logs into a chatbot to speed up an investigation, and nobody has checked where that data goes. Or a company ships a customer support bot that can be talked into saying things it shouldn't. SecAI+ is meant to close that gap.
So these aren't rival certificates. They answer different questions. Security+ asks "do you understand security?" SecAI+ asks "can you secure AI, and use it safely for security work?" The clearest way to see the difference is to look at what each one actually tests.
Domain Comparison: What Each Exam Tests
A "domain" is a chapter of the exam. CompTIA tells you how much of the exam each domain is worth, so the weights show you where the marks are.
Security+ (SY0-701) has five domains: General Security Concepts (12%), Threats, Vulnerabilities and Mitigations (22%), Security Architecture (18%), Security Operations (28%), and Security Program Management and Oversight (20%). It's broad on purpose. It covers the base layer every security job builds on.
SecAI+ (CY0-001) has four domains: Basic AI Concepts Related to Cybersecurity (17%), Securing AI Systems (40%), AI-Assisted Security (24%), and AI Governance, Risk and Compliance (19%).
Here's the number that matters. 40% of SecAI+, almost half the exam, is Securing AI Systems. That domain covers attacks like:
Prompt injection. Hiding instructions in text the AI reads, so it does what the attacker wants. Like slipping a forged note into someone's in-tray.
Data poisoning. Planting bad examples in the data a model learns from, so it learns the wrong lesson.
Jailbreaking. Talking a model out of its own safety rules.
Model theft. Copying a model's behaviour by asking it thousands of questions.
CompTIA lists 23 attack types in this domain. I've explained every one of them in AI Attacks Explained: All 23 SecAI+ Attack Types. The domain also covers the frameworks defenders use, such as the OWASP Top 10 for LLM Applications and MITRE ATLAS, plus controls like guardrails, prompt firewalls and rate limits.
None of that is in today's Security+ (SY0-701) objectives. The other 60% of SecAI+ takes topics you know from Security+, like threat detection, incident response and governance, and looks at them through an AI lens. But Security+ itself is about to change, and that shifts the picture a little.
Security+ Is Changing: SY0-801
CompTIA is releasing a new Security+ exam, SY0-801, on or around 17 November 2026. The English version of SY0-701 retires on 11 June 2027. The format stays the same: up to 90 questions, 90 minutes, a 750 pass mark.
The domains get reweighted, and one new objective stands out: "Explain the security risks associated with artificial intelligence (AI)." So the basics of AI risk are moving into Security+.
Does that make SecAI+ pointless? No. Think of it like first aid and paramedic training. SY0-801 gives everyone an objective's worth of AI risk awareness. SecAI+ spends 40% of a whole exam on how to secure AI systems in detail. One tells you the risks exist. The other teaches you to defend against them.
In plain English
If you book Security+ before about mid-November 2026, you'll most likely sit SY0-701. Either version is fine as your foundation. SY0-801 just adds a taste of the AI material that SecAI+ covers in depth.
So if your goal is both certifications, which do you take first?
Which Should You Take First?
Security+ first. Almost every time.
Here's why. SecAI+ assumes you already understand threats, architecture and operations. It builds on top of security fundamentals. It doesn't teach them. Trying SecAI+ without them is like starting a course on securing cloud networks before you know what a firewall does. You can memorise answers, but you won't understand them. Even CompTIA recommends Security+, CySA+ or PenTest+ first.
Security+ also does a job SecAI+ can't do yet. It's on the DoD 8140 list, which many US government and defence roles require, and it shows up in a huge number of entry-level job ads.
Can you skip it and go straight to SecAI+? Technically, yes. There's no formal prerequisite. But for most people it's the wrong order. Here's where I'd land based on your situation:
Already using AI tools at work? Take SecAI+ now. You needed it yesterday.
In cyber security but not using AI yet? Get SecAI+ within the next six months. What's coming isn't just AI tools. It's security people building AI agents to solve security problems. What we do stays the same. How we do it is about to change completely.
Career changer with some tech background? Security+ first, then add SecAI+ within months.
Brand new to cyber security? Security+ first. Build the foundations. SecAI+ when you're ready.
Get your training FREE.
Buy the training bundle, pass the exam, and we refund the bundle. Your training costs $0.
pass
pass
The refund covers the bundle price, not the exam voucher. Your voucher must be bought through StationX. One refund per student. Plus a 30-day money-back guarantee. Full terms on each bundle page.
Not sure where these two fit in your bigger plan? Our free Certification Matchmaker maps out a certification order for your goals. But that still leaves the question most people really want answered: is SecAI+ worth paying for?
Is SecAI+ Worth It?
Honest answer: it's new, and new certifications take time to be recognised. Look at PenTest+. It launched in 2018, and eight years later many hiring managers still know CEH and OSCP better. HR teams recognise names they've seen a thousand times on CVs, and it takes years for a new name to get there.
So you could wait and see how employers respond. But I think SecAI+ is in a different position, for three reasons:
Less crowded ground. PenTest+ walked into a space CEH and OSCP already owned. AI security doesn't have a long-established certification that every recruiter already knows. There are other AI security certs (I've ranked them in Best AI Security Certifications), but none has had a decade to become the default.
CompTIA's name. When HR compares certifications, a CompTIA badge is one they already recognise from Security+.
It covers your job's future. Even if you work in GRC and never touch AI tools, 19% of SecAI+ is AI governance, risk and compliance. This material is heading your way whatever your role.
And the certificate isn't really the point. The skills are. I think of AI the way we used to think of spreadsheets and word processors. There was a time when knowing how to use them set you apart. Then everyone needed them. In security, AI is heading the same way, and SecAI+ is one of the first structured ways to learn it.
That gives you a window. Right now, very few people have these skills in any real depth. I think that window lasts years, not months, and the people who learn this early get the premium positioning while it lasts. AI security roles are also some of the hardest for AI to replace, because they're the people who make AI safe to use. (Curious how exposed your own role is? JobZone Risk scores it.)
The honest con
I might be wrong about how employers treat SecAI+. It could become a recognised standard, or AI security could split into its own line of advanced certs. Either way, the skills are what you keep. Pay for the exam because you want the knowledge, not just the badge.
At October's US list price, SecAI+ works out at roughly $60 a year over a five-year window. And you don't have to pay list price.
SecAI+ Exam Cost (and Security+)
Exam prices go up and down. CompTIA adjusts them, runs offers, and charges different amounts in different countries. When I checked in October 2026, the US list price was $439 for a Security+ voucher and $298 for SecAI+, so $737 for both. In the video, recorded earlier, I quote $425 and $359. Treat these as a guide and check the current price on CompTIA's site or ours before you buy. CompTIA also sells each exam with Retake Assurance (a free second attempt) for a little more.
You don't have to pay CompTIA's list price. StationX is a CompTIA Authorized Partner, so we sell the same official vouchers for less. If you'll need both eventually, and I think most of us will, buy them that way.
For Less.
StationX is a CompTIA Authorized Partner. The same official exam vouchers you'd buy from CompTIA, for less.
CompTIA price USD 439.00
CompTIA price USD 298.00
Today's US prices against CompTIA's US list price. Prices change and vary by country; the voucher page shows yours.
And the training doesn't have to cost anything either. Both exams have a StationX training bundle with a pass guarantee: pass the exam and we refund the bundle.
Get your training FREE.
Buy the training bundle, pass the exam, and we refund the bundle. Your training costs $0.
pass
pass
The refund covers the bundle price, not the exam voucher. Your voucher must be bought through StationX. One refund per student. Plus a 30-day money-back guarantee. Full terms on each bundle page.
So that's the cost today. Where does all this lead in a few years?
Where the CompTIA Path Is Going
I've watched the certification landscape for 30 years. For most of that time, the classic CompTIA path looked like this: A+ for IT skills, Network+ (or a CCNA if you were specialising in networking), then Security+, then a specialism, such as security operations, penetration testing or auditing.
My prediction is that the new path becomes A+, Network+, Security+, then SecAI+, then your focused role and certifications. AI security will become a necessity the same way Security+ already is. Maybe not this exact exam, but the skills.
There are signs of it already. Mike McNelis of Training Camp, who sat the SecAI+ beta, told CompTIA he expects much of SecAI+ to "bleed directly into broader certifications like Security+" within about five years. With SY0-801's new AI objective, that has started.
The one thing
It isn't really SecAI+ or Security+. It's Security+ for your foundations, then SecAI+ as soon as you're ready. The sooner you add it, the further ahead you'll be.
Certifications are a great start, but they're one piece. If you want to build a career where AI and security meet, our AI Master's Program combines training, mentorship, mastermind groups and a job guarantee to take you from certified to hired.
Frequently Asked Questions
Do I need Security+ before SecAI+?
Not formally. SecAI+ has no required prerequisite. CompTIA recommends 3 to 4 years in IT, 2 or more of them hands-on in security, and Security+, CySA+, PenTest+ or equivalent knowledge. In practice, SecAI+ builds on security fundamentals rather than teaching them, so most people should take Security+ first.
Is SecAI+ harder than Security+?
It is shorter (up to 60 questions in 60 minutes against up to 90 in 90) and its pass mark is lower on the same 100 to 900 scale (600 against 750). But it assumes you already have the foundations Security+ tests, and 40% of it covers securing AI systems, which is new material for most people. Shorter does not mean easier if the content is unfamiliar.
What is the SecAI+ exam code?
CY0-001 (V1). CompTIA launched it on 17 February 2026 and estimates it will retire about three years after launch.
How much do SecAI+ and Security+ cost?
Prices change, and they vary by country. When we checked in October 2026, the US list price was $439 for Security+ and $298 for SecAI+, so about $737 for both. Check the current price before you buy. StationX is a CompTIA Authorized Partner and sells the official vouchers for both exams at a discount.
Is SecAI+ DoD 8140 approved?
Not as far as we can find. Security+ is on the DoD 8140 list. SecAI+ is too new to appear there yet, so if you need a DoD-compliant certification for a government role, Security+ is still the one that counts.
How do you renew Security+ and SecAI+?
Security+ is valid for three years. You renew it through CompTIA's Continuing Education (CE) program, by earning continuing education units and paying a CE fee, or by passing a qualifying higher-level exam. CompTIA has not added SecAI+ to its CE token list yet, so check CompTIA's continuing education page for how SecAI+ renews before you plan around it.
Will SecAI+ be folded into Security+?
Partly, it already has been. The next Security+ exam, SY0-801 (from 17 November 2026), adds an objective on the security risks of AI. But that is one objective. SecAI+ spends 40% of its exam on securing AI systems, so it goes much deeper than Security+ is likely to.
About the Author
Nathan House, Founder & CEO of StationX
Nathan House has 30 years of hands-on cybersecurity experience and is Cambridge-educated, holding CISSP, CISA, CISM, OSCP, CEH, and SABSA. He founded StationX in 1999 — one of the UK’s first cybersecurity companies — and has secured £71 billion in UK mobile banking transactions and the London 2012 Olympics, advising clients including Microsoft, Cisco, BP, Vodafone, and VISA. He authored the world’s most popular cybersecurity course — a #1 Udemy bestseller taken by over 500,000 students — and was named Cyber Security Educator of the Year 2020, AI Security Educator of the Year, and a UK Top 25 Security Influencer 2025. A DEF CON speaker and featured expert on CNN, Fox News, NBC, and the BBC, Nathan leads StationX’s training of more than half a million students worldwide.
