Which cyber security certification should I get first?

For most people heading for a first cyber security job in the UK, the first security certification to get is CompTIA Security+. If you've never worked in IT and don't yet understand how computers and networks fit together, do CompTIA A+ first, then Security+. Everything else can wait until you're employed.

That's the short version. Here's why, and when to break the rule.

Why is Security+ usually the right first choice?

Because employers ask for it. On IT Jobs Watch, CompTIA Security+ appeared in 15.4% of the 149 permanent UK SOC analyst ads in the six months to 9 November 2026. At junior level, few other certifications get named that often.

It also covers the right ground. The new version's domains, according to CompTIA, are general security concepts, threats and vulnerabilities, security architecture, security operations, and programme management. Security operations is the biggest slice at 27%, which is what junior analysts spend their days doing.

And it's vendor-neutral. You're learning concepts that apply whether your future employer uses Splunk, Microsoft Sentinel or something else.

Our Security+ guide covers the exam in more depth.

Is CompTIA Security+ worth it in the UK?

Yes, with one caveat. It's worth it as a door-opener, not as a job guarantee.

On cost, CompTIA's own UK store listed a Security+ bundle (exam voucher with a retake, plus CertMaster Learn and Practice) at £795, down from a list price of £1,064, at the time of writing. You can buy a voucher on its own for less, but the retake option is useful if you're nervous about exams.

What you get for the money: a recognised name on your CV, a structured way to learn the basics, and an easier time with recruiters who filter on keywords. What you don't get: experience. Plenty of people hold Security+ and still can't land a role because they can't talk through anything they've actually done.

You also don't need to spend a fortune preparing. Free video courses and low-cost practice exams are widely used, and many people pass with a book, a set of practice tests and a regular study slot. Paid bootcamps make sense if you need the structure or a deadline, but they aren't required. Whatever you choose, book the exam early. A date in the diary does more for your motivation than another month of "nearly ready".

Take practice tests under timed conditions in the final few weeks. The performance-based questions (short simulations where you configure or analyse something) catch people out more than the multiple choice, so practise those specifically.

What's changing with the Security+ exam?

CompTIA is launching Security+ V8 (exam code SY0-801) on 17 November 2026. It has a maximum of 90 questions, a 90-minute time limit and a pass mark of 750 on a 100 to 900 scale. CompTIA recommends two years of hands-on experience as a security administrator, though you don't need it to sit the exam.

My advice: if you haven't started yet, study for SY0-801. If you're weeks away from sitting SY0-701, check CompTIA's site for the old version's retirement date and book in time. Don't switch mid-revision unless you have to.

Is CompTIA A+ worth it for cyber security?

It depends entirely on where you're starting.

Worth it if: you're new to IT, you've never fixed a PC problem beyond restarting it, and your realistic first job is IT support or service desk. A+ covers hardware, mobile devices, networking, operating systems, security basics and troubleshooting. It's what IT support managers recognise.

Skip it if: you already work in IT, you've built your own PC, or you're comfortable with Windows, networking basics and the command line. Go straight to Network+ or Security+.

A+ is two exams, Core 1 and Core 2, each lasting 90 minutes with around 90 questions, and you have to pass both from the same series. On price, Coursera quoted £133 per exam in the UK in August 2025, while training provider Readynez put it at about £180 per exam in 2026. Check CompTIA's UK store for the current figure before you budget. For a complete beginner, that's money well spent if it gets you into a first IT job. For someone already in IT, it's mostly a duplicate of what you know.

Where does Network+ fit?

Network+ sits between A+ and Security+. It's the one people underrate. A huge share of security work is understanding traffic: what normal looks like, which ports matter, how DNS and routing behave. If networking feels shaky to you, Network+ before Security+ makes the second exam easier and makes you better at the job.

A sensible order for a beginner is:

1. A+ (only if you're new to IT)
2. Network+ (or solid self-study of networking)
3. Security+
4. CySA+ or a vendor certification once you're working in security

Our Network+ page explains what that exam covers.

Which certifications should beginners avoid?

Not avoid forever. Just not first.

CISSP is a senior certification aimed at experienced practitioners, and it requires several years of relevant paid work to become fully certified. Studying for it at the start is a poor use of time.

Expensive offensive security certifications can be great later, but if you've never worked in IT, jumping straight into penetration testing usually ends in frustration. Most pen testers started somewhere else.

Long lists of cheap online certificates. Ten badges from free courses don't impress hiring managers as much as one recognised exam plus a project you can explain.

What matters more than the certificate?

Evidence. The candidates hiring managers remember are the ones who can describe something they'd built or investigated in detail: what they expected, what went wrong, how they fixed it.

So pair your first certification with one practical project. A home lab with a SIEM. A write-up of a practice incident. A small script that parses logs. That combination (certificate plus proof) is what turns an application into an interview.

For example, a beginner might set up a free Splunk trial on an old laptop, forward Windows event logs to it, and then deliberately fail a few logins to see what the alerts look like. Write up the steps, the searches you used and what you'd escalate in a real SOC. It's a weekend's work, and it gives you something specific to talk about.

For a full list of qualifications and how they map to roles, see our cyber security qualifications guide.

How Experiencely can help

If you'd rather not piece this together alone, our cyber security programme includes training and five CompTIA certifications (A+, Network+, Security+, CySA+ and PenTest+), with exam vouchers included. Alongside that you work on a live security project, placed within 48 hours, about an hour a day for three months, fully remote. The price is £2,495. If you're not hired within 60 days of finishing, you get your money back, subject to conditions. You come out with both the certificates and the practical work.

Frequently asked questions

Sources

Figures are taken from the sources below. Salary ranges are indicative and individual offers vary. Last checked 9 November 2026.

1. CompTIA Security+ (V8) certification
2. CompTIA UK store: Security+ SY0-701 Complete Bundle
3. CompTIA: A+ has two exams, what you need to know
4. Coursera: What is the CompTIA A+ certification?
5. Readynez: UK CompTIA A+ exam price
6. IT Jobs Watch: SOC Analyst jobs, UK