CompTIA Certification Path 2026: A+ to Security+ to CySA+

CompTIA is still the vendor-neutral on-ramp into IT and cybersecurity. The core sequence has not changed: A+ → Network+ → Security+. After Security+ you specialize (analyst, pentest, cloud, or advanced security architecture).

Start practicing: Free CompTIA A+ questions → if you are new to IT. Ready for security? Security+ SY0-701 practice →.

The core three (take these in order)

You can skip A+ if you already work as a sysadmin or developer and only need a security credential. Do not skip Network+ if Security+ is the goal and you have never configured a subnet or read a packet flow. SY0-701 assumes that fluency.

Study guides already on CertStud:

• CompTIA A+ study guide
• A+ V15 exam updates
• Network+ N10-009 guide
• Security+ study notes
• How to pass Security+ on the first try

After Security+: pick a specialty

CySA+ is the default next step for most Security+ holders entering a SOC. PenTest+ is the default if you want a pentest or red-team junior role. SecurityX is not a beginner exam.

Who should skip A+

Skip A+ (start at Network+ or Security+) if you:

• Already hold an AWS, Azure, or CCNA associate and understand OSI / TCP-IP
• Work helpdesk or sysadmin today and can troubleshoot Windows/Linux without a study guide
• Are a career-changing developer whose only goal is Security+

Do not skip A+ if you have never built a PC, imaged an OS, or explained RAID to a user. V15 still tests that floor.

CompTIA vs the next vendor cert

Broader security map: Best cybersecurity certifications 2026.

Browse all CompTIA certs →