Prep
What CompTIA changed in CySA+ V4
CySA+ V4, exam code CS0-004, is the new version of CompTIA's Cybersecurity Analyst certification. CompTIA's V4 page gives a launch date of June 23, 2026. It replaces CySA+ V3 (CS0-003), which launched on June 6, 2023.
What CompTIA's official pages confirm, as of November 7, 2026:
- Same exam size and pass mark. Both versions have a maximum of 85 questions in 165 minutes, and you need 750 on a scale of 100-900.
- Same four domains, new weights. Security Operations 34%, Vulnerability Management 26%, Incident Response and Management 24%, Reporting and Communication 16%.
- AI is now in the objectives. Security Operations includes an objective on AI use cases, risks and governance in security operations.
- More cloud and hybrid. The V4 skills list covers suspicious activity in cloud environments and security practices for cloud and hybrid environments.
- Languages. V4 is in English now, with French, Japanese, Spanish and Portuguese listed as coming soon.
- Recommended experience. About four years in a SOC analyst or vulnerability analyst role. There are no formal prerequisites.
Other topics CompTIA lists for V4 include SIEM and EDR tools, threat intelligence and threat hunting, MITRE ATT&CK and the Cyber Kill Chain, risk-based vulnerability prioritisation and identity concepts. CompTIA's V4 page does not list question types; V3 used multiple-choice and performance-based questions, and we recommend preparing for hands-on items on V4 too.
| CS0-003 (V3) | CS0-004 (V4) | Change | |
|---|---|---|---|
| Security Operations | 33% | 34% | +1 point |
| Vulnerability Management | 30% | 26% | -4 points |
| Incident Response and Management | 20% | 24% | +4 points |
| Reporting and Communication | 17% | 16% | -1 point |
| Questions / time / passing score | Up to 85 / 165 min / 750 | Up to 85 / 165 min / 750 | No change |
| Launched | June 6, 2023 | June 23, 2026 | - |
| Retires | English Dec 22, 2026; JA/PT/ES Mar 23, 2027 | Not announced | - |
CS0-003 vs CS0-004: the weight shift
The key table below shows every domain. In short:
- Incident Response and Management gains the most, from 20% to 24%. Expect more questions on detection, containment, eradication and recovery steps, and on what to do next in a described incident.
- Vulnerability Management falls from 30% to 26%. It is still the second-largest domain.
- Security Operations edges up from 33% to 34%, and now carries the AI objective.
- Reporting and Communication slips from 17% to 16%.
For someone who studied CS0-003, this is a rebalance rather than a new exam. The AI objective and the extra cloud and hybrid coverage are the parts you would need to add.
Key dates
| Date | What happens |
|---|---|
| June 6, 2023 | CS0-003 (V3) launched |
| June 23, 2026 | CS0-004 (V4) launched in English |
| December 22, 2026 | Last day for CS0-003 in English |
| March 23, 2027 | Last day for CS0-003 in Japanese, Portuguese and Spanish |
CompTIA has not published a retirement date for CS0-004.
What it means for you
A pass on either version gives you the same CySA+ certification, valid for three years. The decision is about time left and language:
- Starting now: study for CS0-004. As of November 7, 2026 there are about six weeks left on the English CS0-003, which is not enough to prepare properly from scratch.
- Nearly ready for CS0-003 in English: book soon if you can sit it before December 22, 2026, and leave room for a retake before the cut-off. If you cannot, move to CS0-004 and add the AI, cloud and incident response material.
- Testing in Japanese, Portuguese or Spanish: CS0-003 stays available in those languages until March 23, 2027, while V4 translations are still listed as coming soon. Check the V4 page before you decide, in case your language is added.
- Already hold CySA+: nothing changes. CompTIA's renewal page asks for 60 CEUs and the CE fee in each three-year cycle, or another qualifying activity.
CompTIA's pages do not show a voucher price. CompTIA partner Total Seminars reports a US price of US$439 per attempt since mid-2026. Confirm the price for your country in the CompTIA store before you buy.
What we do not know yet
Some details are still missing from CompTIA's official pages, and we would rather say so than guess:
- Question types for V4. The V4 page does not list them. V3 mixed multiple-choice and performance-based questions.
- Translation dates. French, Japanese, Spanish and Portuguese are listed as coming soon, with no dates.
- Official price. CompTIA's certification pages do not show one. The US$439 figure comes from a CompTIA partner.
- A V4 retirement date. None is published. For comparison, CompTIA estimates about three years for the new Security+ V8, and CySA+ V3 ran from June 2023 to December 2026 in English.
We will update this post when CompTIA publishes any of these.
Where CySA+ fits, and how to prepare
CySA+ is an analyst-level exam that builds on Security+. If you do not have Security+ yet, start there, and note that Security+ is also changing: SY0-801 launches on or around November 17, 2026. Our post on the Security+ SY0-801 changes covers the dates.
To prepare for CS0-004:
- Download the official CS0-004 objectives and use them as your checklist.
- Spend most time on Security Operations and Vulnerability Management, but give Incident Response a full quarter of your plan.
- Practise with real data: logs, packet captures, vulnerability scan output and alerts from SIEM and EDR tools.
- Add the AI objective early: AI use cases in a SOC, the risks they introduce, and how they are governed.
- Finish with timed sets in 165-minute blocks.
Our CySA+ study guide has a 10-week plan for CS0-004 and a full cost breakdown. We do not have a CySA+ practice test yet; our free Security+ practice test is a good check of the foundations CySA+ assumes. For the bigger picture, see the cybersecurity certification roadmap.