SecurityX
CompTIA SecurityX
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
SecurityX (exam code CAS-005, version V5) is CompTIA's expert-level cybersecurity certification, launched on December 17, 2024 as the rebrand and update of CASP+. It is aimed at security architects and senior security engineers who design, build, and integrate secure solutions across complex environments and who support a resilient enterprise while addressing governance, risk, and compliance needs.
The V5 exam covers four domains: Governance, Risk, and Compliance (20%), Security Architecture (27%), Security Engineering (31%), and Security Operations (22%) - 23 objectives in total, down from 28 in CASP+ V4. Topic areas include cloud capabilities and control strategies, deperimeterization (SASE, SD-WAN), zero trust, automation and infrastructure as code, advanced cryptography such as post-quantum and homomorphic encryption, SIEM analysis, threat hunting with STIX/TAXII and Sigma/YARA, and incident response including malware analysis and reverse engineering.
The exam allows a maximum of 90 questions, a mix of multiple-choice and performance-based items, in up to 165 minutes, and is scored pass/fail with no scaled score. CompTIA recommends at least 10 years of hands-on IT experience, including 5 years of security. Typical preparation combines guided instruction with hands-on labs and timed practice exams.
This guide is independent study material and is not affiliated with or endorsed by CompTIA.
What you'll study
About SecurityX preparation
What is the SecurityX exam format?
The V5 exam (CAS-005) contains a maximum of 90 questions mixing multiple-choice and performance-based items, with a maximum of 165 minutes to complete it. Scoring is pass/fail only, with no scaled score. It is offered in English and Japanese, with other languages to be determined.
Is SecurityX just a renamed CASP+?
Yes, with an update. CompTIA rebranded CASP+ as SecurityX and released exam version V5 on December 17, 2024, replacing V4. The four-domain structure remains, but the weights shifted and objectives dropped from 28 to 23. Existing CASP+ holders keep their certification status and continuing education program, and receive an updated SecurityX badge and transcript.
How difficult is the SecurityX exam?
It sits at CompTIA's expert Xpert level, and the recommended background is at least 10 years of general hands-on IT experience including 5 years of security, plus Network+, Security+, CySA+, Cloud+ and PenTest+ or equivalent knowledge. No pass rate is published on CompTIA's SecurityX pages, so gauge readiness with timed practice exams rather than comparing it to entry-level certifications.
Can I retake the exam if I fail?
CompTIA's SecurityX certification page and its rebrand blog post do not state a waiting period or retake rule. What they do advertise is Retake Assurance, bundled with a voucher in the Practice and Exam Bundle and the Complete Bundle. Confirm CompTIA's current exam policy and your voucher terms before scheduling a second attempt.
What score do I need to pass?
There is no numeric target to aim for. CompTIA states that SecurityX scoring is pass/fail only, with no scaled score. Because you cannot measure yourself against a cutoff, use full-length timed practice exams and objective-level mastery reporting to decide when you are ready to schedule.
In what order should I study?
CompTIA estimates 30–60 hours for CertMaster Perform (instruction, videos, labs and assessments), 15–25 hours for hands-on labs, and 10–20 hours for practice exams and objective quizzes. A sensible sequence is Perform for coverage, Labs to apply concepts in live and simulated environments, then Practice to confirm readiness and close gaps.
Which domains carry the most weight?
Security Engineering is the largest at 31%, followed by Security Architecture at 27%, Security Operations at 22%, and Governance, Risk, and Compliance at 20%. Engineering and architecture together account for 58% of the exam, so automation, cryptography, cloud control strategies and network architecture deserve the bulk of your study time.
When will SecurityX retire?
CompTIA states that exams usually retire about three years after launch, which for a December 17, 2024 launch points to an estimated 2027 retirement. No exact retirement date has been published, so confirm the current exam version before you buy vouchers or schedule a late attempt.
Which job roles does SecurityX map to?
CompTIA lists NICE and DoD 8140 work roles including security architect, systems requirements planner, security control assessor, and research and development specialist. Its blog adds that SecurityX is ISO/ANSI 17024 compliant and maps to DCWF work roles used by DoD Directive 8140.03M, which matters if you work in or sell to the US federal space.