CompTIA Security Analytics Professional (stackable) exam guide

Exam No separate exam (requires Security+ and CySA+)

CompTIA Security Analytics Professional (CSAP) is a stackable certification awarded when you hold both Security+ and CySA+. There is no separate exam; it signals that you combine core security knowledge with hands-on security analytics and detection skills.

QuestionsSee official page

Time limitSee official page

Passing scoreSee official page

Exam feeSee official page

Valid forSee official page

DeliveryEarned automatically through CompTIA when requirements are met

Format: Stackable credential; no exam of its own. Fee note: No extra fee; you pay only for the Security+ and CySA+ exams.

Who it's for

SOC and security analysts who hold or are working toward Security+ and CySA+.

What the exam covers

The vendor does not publish a domain breakdown for this exam. Check the official exam page for the current objectives.

Eligibility & prerequisites

Required: Active CompTIA Security+ and CompTIA CySA+ certifications.

Recommended: CompTIA positions it at professional level, roughly 2-5 years in security roles.

Keeping it active

No separate renewal; it stays active while the underlying certifications are active. Renewing CySA+ through CompTIA CE also renews Security+.

Skills & careers

Skills it validates

Security operations and monitoring
Threat detection and log analysis
Vulnerability management
Incident response
Security controls and architecture basics
Reporting and communication of findings

Job roles

SOC AnalystSecurity AnalystThreat HunterVulnerability AnalystIncident ResponderSecurity Engineer

DoD 8140

CSAP itself is not separately listed; Security+ and CySA+ are both recognised in the DoD 8140 qualification matrix. Open the DoD Workforce Navigator

Where it fits in your path

Take before

CompTIA Security+CompTIA CySA+

Go next

CompTIA PenTest+ CompTIA SecurityX (formerly CASP+) GIAC Certified Incident Handler (GCIH)EC-Council Certified Threat Intelligence Analyst (CTIA)

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

Step 1: Earn Security+ (6-8 weeks).
Step 2: Earn CySA+ (6-8 weeks), focusing on log analysis and vulnerability management labs.
Step 3: Confirm the CSAP badge in your CompTIA account.
Step 4: Renew CySA+ through CE to keep both certs and CSAP active.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam date Hours per week

Exam-day tips

There is no CSAP exam; your effort goes into CySA+ performance-based questions.
Renewing the higher-level CySA+ renews Security+ too, which keeps CSAP active.
List CSAP with the underlying certs; job filters usually search for Security+ and CySA+.
Take CySA+ while Security+ knowledge is fresh, ideally within a few months.

Frequently asked questions

Is there a CSAP exam?

No. It is awarded for holding Security+ and CySA+.

How much does CSAP cost?

No extra cost beyond the two exams.

Does CSAP expire?

It follows the status of Security+ and CySA+.

Is CSAP worth it?

It is free once you have both certs; the real value is in CySA+ itself.

What comes after CSAP?

PenTest+, SecurityX, or a GIAC cert such as GCIH.

Official page: www.comptia.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.

1. Map it thinQguide™ · 409 cert guides 2. Learn it thinQterms™ · 7,491 terms 3. Untangle it 180 look-alike comparisons 4. Prove it thinQready™ · free readiness check

Find your exam