CompTIA Security+ is one of the most widely recognised entry points into cybersecurity. A new version of the exam, SY0-801, is expected to launch in November 2026. The current exam, SY0-701, will remain available until June 2027. This article explains what is changing, what the new exam covers, and how to decide which version to take.
What is changing
CompTIA updates Security+ about every three years, so that the certification keeps pace with real threats and technology. The new version is known as Security+ V8, with the exam code SY0-801. It replaces SY0-701, which launched in November 2023.
Key dates
- SY0-801 launch: expected on or around 17 November 2026, according to CompTIA.
- SY0-701 retirement (English): 11 June 2027.
- SY0-701 retirement (Japanese, Portuguese, Spanish and Thai): 13 August 2027.
Launch dates are sometimes moved by CompTIA, so the official Security+ V8 page should be checked before an exam is booked.
What the new exam covers
SY0-801 is organised into five domains. The weightings below are published by CompTIA:
- General Security Concepts: 16%
- Threats, Vulnerabilities, and Attacks: 24%
- Security Architecture: 19%
- Security Operations: 27%
- Security Program Management and Oversight: 14%
The exam has a maximum of 90 questions, including multiple-choice and performance-based questions. It runs for 90 minutes, and the passing score is 750 on a scale of 100 to 900.
What is new in SY0-801
The biggest change is the attention given to artificial intelligence. The draft objectives include:
- AI security risks. Candidates are expected to explain the risks that AI brings, such as prompt injection and data leakage from large language models.
- AI as an attack tool. AI-generated phishing, deepfakes and AI-assisted malware are covered.
- AI in security operations. AI-assisted workflows are included under automation.
- Cloud and hybrid environments. Security architecture now covers cloud, hybrid, on-premises and operational technology environments.
- Zero Trust. Zero Trust principles are included as a core skill.
Security Operations remains the largest domain. Incident response, identity and access management, and monitoring are still central to the exam.
Should you take SY0-701 now or wait for SY0-801?
Both versions lead to the same Security+ certification. The right choice depends on when you expect to be ready to sit the exam.
- SY0-701 is recommended if you expect to be ready before mid-2027, or if an employer or contract requires the certification soon. Study material for SY0-701 is mature and widely available.
- SY0-801 is recommended if you are starting from the beginning and expect to sit the exam after June 2027, or if your work involves AI systems.
Study should not be paused while waiting for the new version. The core of the exam (security concepts, threats and security operations) remains largely the same.
Does an existing Security+ certification remain valid?
Yes. A Security+ certification remains valid for three years from the date it is earned, whichever exam version was taken. It can be renewed through CompTIA continuing education.
Why Security+ matters for businesses in Zimbabwe and South Africa
Phishing, ransomware and email fraud are among the most common threats faced by local businesses. Data protection is also required by POPIA in South Africa and by the Cyber and Data Protection Act in Zimbabwe. IT staff who hold Security+ are better prepared to protect systems, respond to incidents and support compliance.
Study Security+ at your own pace with Iteb Co
Self-paced online CompTIA courses are offered by Iteb Co for Security+, A+, Network+, CySA+ and PenTest+. Learners study when it suits them, without time away from work. Exam vouchers can be included on request.
Source: CompTIA Security+ V8. Dates and objectives are correct at the time of writing and may be updated by CompTIA.