Last updated: October 15, 2026.
Every few years CompTIA retires a Security+ version and replaces it with a new one. SY0-801 (V8) is the latest. Candidates often ask why the exam keeps changing, and whether the change is really necessary. Here is what CompTIA has published, and where we are offering our own reading.
This article is part of our complete guide to Security+ SY0-801.
What CompTIA has said
A planned lifecycle of about three years
CompTIA's Security+ pages list each version with an estimated retirement of roughly three years after launch. SY0-701 launched in 2023, so a new version around late 2026 follows the usual rhythm. Retiring the old exam about seven months after the new one launches gives candidates time to finish what they started.
Objectives built from experts and industry data
According to the exam objectives document, CompTIA exams come from subject matter expert workshops and industry-wide surveys about the skills and knowledge IT professionals need. When the work of security administrators changes, the objectives are meant to follow.
Accreditation requires regular review
The exam is accredited by ANAB under the ISO 17024 standard, which the objectives document says leads to regular reviews and updates of the exam objectives. A certification that is meant to be recognized by employers and government programs has to keep its content current.
What the new content suggests
The following is our interpretation based on the published objectives, not an official CompTIA statement.
- AI has become part of everyday security work. V8 adds an objective on AI-related threats and vulnerabilities, lists large language models as an attack surface, and includes AI in security automation. It would be hard for a security administrator exam in 2026 to ignore it.
- Environments are more cloud-based and automated. Topics such as infrastructure as code, Security Service Edge, secrets scanning, cloud security posture management and orchestration reflect how modern teams actually operate.
- Attackers keep changing tactics. QR-code phishing, deepfakes and session-based attacks appear in the objectives because these are what incident responders now see.
- Identity is central. Passkeys, passwordless authentication and just-in-time access show how access management is moving beyond passwords.
Why Security+ does not go deep on AI
CompTIA has also introduced a separate certification focused on AI security, SecAI+. Security+ keeps its role as a broad, foundational security exam, so the AI objectives are about recognizing risks and applying security principles to AI systems rather than building or attacking models.
Is the change a big deal for candidates?
For most people, no. The format, the number of domains and the passing score all stay the same, and most core knowledge carries over from V7. The changes that matter are the shifted domain weights and the new AI content. See exactly what moved in our SY0-701 vs SY0-801 comparison.
What should you do now?
- Decide which version fits your test date using our guide to choosing between 701 and 801.
- Read the AI objectives closely if you are sitting V8: AI in Security+ SY0-801.
- Browse official training and practice in our CompTIA Security+ SY0-801 (V8) collection.
Frequently asked questions
Why does CompTIA update Security+ every few years?
Because its objectives are meant to reflect current job skills, and its accreditation calls for regular review.
Did CompTIA say AI was the reason for V8?
CompTIA has not framed it that way in the documents we reviewed. AI is the most visible change, so it is a reasonable reading, but it is our interpretation.
Does V8 make my V7 Security+ obsolete?
No. A certification earned on SY0-701 stays valid for three years from your test date.
Written by an instructor who holds Security+, CySA+, PenTest+ and SecurityX. CertInstructor is an Authorized CompTIA Partner.
0 comments