If you are studying for CompTIA Security+ right now, you have probably seen the rumours: a new version, SY0-801, is on the way. Draft exam objectives are already circulating, and training providers are pointing to a preview launch in the final quarter of 2026.
That leaves a lot of candidates asking the same question: Should I rush to sit SY0-701 now, or wait for SY0-801?
This post breaks down what we actually know, what is still speculation, what is changing, and how to decide.
First, what is confirmed (and what isn’t)
Here is the honest picture as of today, 21 September 2026:
- Draft SY0-801 objectives exist. They outline the same five-domain structure with new weightings and new AI security content.
- The launch date is not officially confirmed. Industry reports point to a tentative preview launch around late October to mid-November 2026, but CompTIA has not published a date on its main certification page. CompTIA exam launches have slipped by months before.
- SY0-701 is not retiring tomorrow. CompTIA normally keeps the old and new versions available side by side for several months after a launch. Most estimates put SY0-701’s retirement somewhere in mid-2027.
- Your certification is equally valid either way. Security+ is valid for three years whichever version you pass. Employers and DoD 8140 requirements list “Security+”, not a specific exam code.
Bottom line: nobody needs to panic. You have time, but not unlimited time.
What is changing in SY0-801
The five domains stay, but the weightings move. Based on the draft objectives:
| Domain | SY0-701 | SY0-801 (draft) | Change |
|---|---|---|---|
| 1. General Security Concepts | 12% | 16% | +4% |
| 2. Threats, Vulnerabilities & Attacks | 22% | 24% | +2% |
| 3. Security Architecture | 18% | 19% | +1% |
| 4. Security Operations | 28% | 27% | −1% |
| 5. Security Program Management & Oversight | 20% | 14% | −6% |
Three things stand out:
- Fundamentals matter more. General Security Concepts grows from 12% to 16%. Controls, the CIA triad, change management and cryptography basics will carry more weight. Weak fundamentals will cost you more marks.
- Governance shrinks. Program Management drops by six points. Policies, risk and compliance are still tested, just less heavily.
- Security Operations is still the biggest domain. Incident response, identity and access management, and monitoring remain where most marks live.
The big one: AI security is now on the exam
The headline addition in SY0-801 is artificial intelligence, and it shows up from two directions.
1. Attacking and defending AI systems
The draft objectives cover large language model (LLM) security, including:
- Prompt injection – crafting inputs that make a model ignore its instructions or reveal data.
- Data leakage through model interactions – sensitive information exposed through prompts, outputs or training data.
- Model and data poisoning – corrupting what a model learns from.
- Defensive patterns such as input validation, output filtering and access controls around AI tools.
2. AI as an attacker’s tool
You will also need to recognise how attackers use AI, including:
- AI-generated phishing that has no spelling mistakes and is tailored to the target.
- Deepfake voice and video used for social engineering (think “the CEO” calling finance to approve a transfer).
- Automated vulnerability discovery and AI-assisted malware development.
If you have read our earlier posts on AI voice-clone scams and weaponised AI, you already have a head start here. This is exactly where the industry has been heading.
So… take SY0-701 now, or wait?
There is no single right answer, but here is a simple way to decide.
Take SY0-701 now if:
- You are already more than half way through your preparation.
- You need the certification for a job offer, promotion or contract requirement in the next few months.
- You want to use the huge pool of mature SY0-701 study material: practice questions, videos, books and labs that have been refined for nearly three years.
- You can realistically sit the exam within the next 3–6 months.
Consider waiting for SY0-801 if:
- You are just starting and have no deadline.
- You specifically want AI security on your certification story for AI-focused roles.
- You are comfortable studying with newer, less tested materials for the first few months after launch.
Our view: for most candidates, a certification you pass this year is worth more than a newer version you pass next year. Early adopters of any new exam version face thinner study resources and fewer real-world reports on what the exam feels like. If you are on track, keep going with SY0-701.
A smart “both ways” study plan
Whichever version you choose, you can future-proof your preparation:
- Over-invest in fundamentals. They are growing in weight on SY0-801 and they carry every other domain on SY0-701.
- Treat Security Operations as your core. It is the largest domain on both versions.
- Learn the basics of AI threats anyway. Prompt injection and deepfake social engineering are real-world skills, whether or not they are on your exam.
- Practise with performance-based questions (PBQs). Both versions test applied skill, not memorisation.
- Book your exam date. A fixed date is the best protection against “I’ll wait and see” turning into another six months.
How CyberPrep can help
CyberPrep’s Security+ practice questions are built to real exam standard, with explanations for every option so you learn why an answer is right, not just which one. Short daily sessions and spaced repetition help you keep what you learn, whether your target is SY0-701 or SY0-801.
Ready to start? Try CyberPrep’s Security+ practice questions today and find out where you stand.
Note: SY0-801 details in this post are based on draft objectives and industry reports as of September 2026. Always confirm exam dates and objectives on CompTIA’s official website before booking.
