CompTIA Certifications in 2026: A+, Network+, Security+, CySA+, PenTest+, SecurityX, Cloud, Linux, Data, and Expert Paths

CompTIA’s 2026 certification portfolio spans entry-level technology literacy, core infrastructure, cybersecurity, cloud, Linux, servers, project work, data, networking specialisation, and expert-level security and AI. The program is intentionally vendor neutral, which makes it useful for candidates who need portable skills before or alongside vendor-specific credentials. At the same time, the breadth of the catalogue means a good CompTIA plan should be role based rather than a goal of collecting every badge.

Current exam versions matter. A+ is now on the 220-1201 and 220-1202 series, Network+ uses N10-009, Security+ uses SY0-701, CySA+ has moved to CS0-004, PenTest+ uses PT0-003, Cloud+ uses CV0-004, Linux+ uses XK0-006, SecurityX uses CAS-005, and newer expert credentials include CloudNetX and SecAI+. Data credentials have also evolved, including Data+ and the DataAI path that replaced the earlier DataX naming. Candidates should always confirm the active version before buying study material.

Tech+ and A+ establish different kinds of entry-level evidence

CompTIA Tech+ is designed as a broad technology foundation for learners exploring IT, while CompTIA A+ is the more established entry credential for technical support and endpoint work. The current A+ series uses 220-1201 and 220-1202, covering hardware, networking, operating systems, security, troubleshooting, cloud and virtualisation, and operational procedures.

The transition from 220-1101 to 220-1201 is discussed in The A+ 220-1101 and 220-1201 differences. Candidates should use current objectives because device types, operating practices, security expectations, and cloud-connected support work continue to change.

A+ preparation should be hands on: install operating systems, troubleshoot storage and memory, configure networks, manage users, secure endpoints, use command-line tools, and document support work.

Network+ is the vendor-neutral networking foundation

CompTIA Network+ uses the current N10-009 exam. It covers network concepts, implementation, operations, security, troubleshooting, and modern topics such as cloud-connected infrastructure and software-defined environments.

The move from N10-008 to N10-009 introduced meaningful changes, outlined in the Network+ transition. Candidates should learn packet and protocol behaviour rather than relying only on port-number memorisation.

A strong lab includes addressing, VLANs, routing, wireless, DNS, DHCP, cabling, firewalls, and packet capture. The Network+ study resources are most useful when they support repeated troubleshooting practice.

Security+ remains the broad cybersecurity baseline

CompTIA Security+ uses the current SY0-701 exam. The certification covers security concepts, threats, vulnerabilities, architecture, operations, identity, risk, governance, cryptography, and incident response at a broad practitioner level.

Security+ is strongest as a foundation because it forces candidates to connect technical controls with organisational risk. A firewall rule, MFA rollout, encryption choice, vulnerability scan, or incident playbook only makes sense when the professional understands the asset, threat, business requirement, and control objective.

Candidates should avoid turning the exam into pure acronym study. Build a small security lab, inspect logs, configure identity controls, harden endpoints, test network rules, and work through incidents.

CySA+ develops defensive analysis and response capability

CompTIA CySA+ is aimed at security analysts working with detection, vulnerability management, incident response, threat intelligence, and security operations. The current exam generation is CS0-004, replacing the earlier CS0-003 version.

Analysts need to interpret evidence from SIEM data, endpoint telemetry, network logs, cloud events, vulnerability tools, and threat intelligence. The exam is therefore more useful when candidates practise forming and testing hypotheses: what happened, what is affected, what evidence supports the conclusion, and what should be contained first?

Older editorial coverage of the CS0-003 era can remain useful for concepts, but current candidates should always map study to the latest objectives.

PenTest+ validates offensive testing in a controlled professional process

CompTIA PenTest+ now uses PT0-003. It covers planning, reconnaissance, vulnerability discovery, exploitation, post-exploitation, web and cloud testing, reporting, and professional constraints.

The credential is not a licence to attack systems. Candidates should understand scope, authorisation, rules of engagement, evidence, safety, and reporting. A useful PenTest+ preparation strategy combines labs with disciplined documentation.

Practice environments should be intentionally vulnerable and authorised. The professional skill is identifying risk and communicating remediation, not merely obtaining shell access.

SecurityX is the advanced security-engineering successor to CASP+

CompTIA renamed its advanced CASP+ credential to SecurityX, while retaining the expert-level focus on enterprise security architecture, engineering, operations, governance, and risk. The current exam is CAS-005.

SecurityX candidates should be prepared to make architectural decisions under constraints. Which identity model fits a hybrid estate? How should segmentation be designed? Where should encryption terminate? Which controls reduce a particular attack path? How does a security design affect resilience and operations?

This is not simply “Security+ with harder questions.” The expectation is broader professional judgement across complex enterprise environments.

Cloud+, CloudNetX, and Server+ cover different infrastructure responsibilities

Cloud+ CV0-004 validates vendor-neutral cloud deployment, operations, security, DevOps-adjacent practice, troubleshooting, and management. CloudNetX CNX-001 is a newer advanced credential focused on complex cloud-networking environments. Server+ SK0-005 remains relevant for professionals responsible for server hardware, operating systems, storage, security, and troubleshooting.

These credentials overlap but are not replacements for one another. Cloud+ is broad cloud operations, CloudNetX goes deeper into advanced network design and operations across cloud environments, and Server+ is closer to server-platform responsibility.

Candidates should choose based on what infrastructure they own rather than assuming cloud skills automatically replace server and networking fundamentals.

Linux+ rewards command-line and systems reasoning

CompTIA Linux+ uses the current XK0-006 exam. Linux administrators need command-line fluency, storage and filesystem knowledge, networking, users and permissions, services, security, scripting, containers, automation, and troubleshooting.

The best study environment is a Linux system the candidate is willing to break. Configure services, inspect processes, change permissions, manage packages, create storage, troubleshoot networking, read logs, write small scripts, and recover from mistakes.

Older XK0-005 material can still teach durable concepts, but the current exam blueprint should control preparation.

Data+, DataSys+, and DataAI represent different data responsibilities

CompTIA’s data portfolio has expanded beyond a single analyst credential. Data+ DA0-002 targets analytical skills, data preparation, statistics, visualisation, and governance. DataSys+ DS0-001 focuses more on database and data-system administration. The current DataAI DY0-001 credential reflects the renamed DataX path and addresses advanced data and AI-oriented capability.

The question of whether CompTIA data certification fits a data career depends on the role. Analysts, database administrators, data engineers, and AI practitioners need overlapping but distinct evidence.

A coherent path should follow the actual work rather than collecting adjacent data labels.

SecAI+ brings AI-security work into the expert portfolio

SecAI+ CY0-001 is a newer expert-level CompTIA credential focused on securing AI systems and using AI in security operations. It reflects the growing overlap between cybersecurity, model governance, data protection, threat analysis, and secure AI deployment.

Candidates should understand that AI introduces both new assets and new attack surfaces: training data, prompts, model endpoints, agents, plugins, embeddings, pipelines, and sensitive context. Traditional security principles still apply—identity, least privilege, logging, secure software, data governance, incident response—but they need to be adapted to AI behaviour.

Because the field changes quickly, current objectives and hands-on experimentation are especially important.

Project+ and the broader portfolio can support non-specialist technical roles

CompTIA Project+, using PK0-005, provides lightweight project-management knowledge for technical professionals who manage small initiatives or participate in project teams. It covers project basics, constraints, communication, change, documentation, and IT-related project environments.

CompTIA also maintains certifications for foundational technology, core infrastructure, cybersecurity, and data. The CompTIA certification roadmap is useful as a map, not a mandatory sequence.

A support technician may progress from A+ to Network+ and Security+. A SOC analyst may move from Security+ to CySA+. A penetration tester may choose PenTest+. An experienced security architect may target SecurityX or SecAI+.

Choose one coherent CompTIA path and build real evidence around it

CompTIA’s vendor-neutral model is strongest when it creates portable fundamentals. A candidate should be able to perform the work named by the credential: troubleshoot a workstation, diagnose a network, investigate a security alert, administer Linux, test a system, operate cloud infrastructure, or analyse data.

Certification preparation should therefore include labs, notes, small projects, and troubleshooting journals. After each practice scenario, write what the symptom was, what evidence was collected, what hypothesis was tested, what action fixed the issue, and how recurrence would be prevented.

The 2026 portfolio is broad enough for many career stages. The best plan is not the one with the most badges; it is the one where each credential marks a genuine expansion of technical responsibility.

Many CompTIA certifications participate in a continuing-education renewal model, which means candidates should understand maintenance before they pass. Renewal can involve approved education activities, higher-level certifications, or other current mechanisms depending on the credential. Exact rules and fees should always be verified for the candidate’s certification cycle.

The professional value of renewal is that core technology changes. Security threats evolve, operating systems and cloud services change, wireless and network practices advance, and AI creates new responsibilities. A credential should represent current capability rather than a snapshot from many years earlier.

Keeping a record of courses, projects, training, and higher-level certification work makes maintenance easier and encourages deliberate professional development.

Entry-level candidates sometimes ask for one universal sequence, but the better progression depends on the role. A support technician may use A+, Network+, and Security+ to build broad troubleshooting competence. A Linux administrator may combine Network+ fundamentals with Linux+. A SOC analyst can use Security+ and CySA+. A penetration tester can add PenTest+. A cloud-security architect may eventually target SecurityX, CloudNetX, or SecAI+.

Employers still need evidence beyond exam scores. Candidates should maintain a small portfolio: network diagrams, troubleshooting notes, scripts, incident reports, lab write-ups, data-analysis notebooks, or cloud architecture sketches. These artifacts show how certification knowledge becomes work.

That is the central value of the CompTIA ecosystem: portable foundations that can be combined into a role story without locking the professional to one product vendor.