SecAI+ went live on 17 February 2026 under exam code CY0-001. CompTIA calls it the first vendor-neutral AI security certification, and as far as mainstream IT certs go that is fair. The format is classic CompTIA: a maximum of 60 questions, a mix of multiple choice and performance-based items, 60 minutes, and a pass mark of 600 on the usual 100 to 900 scale. CompTIA recommends three to four years in IT, two of them hands-on in security, and suggests Security+, CySA+ or PenTest+ as the background. The four domains are the part I like.
Basic AI concepts related to cybersecurity is 17%. Securing AI systems is 40%. AI-assisted security is 24%. AI governance, risk and compliance is 19%.
So the biggest chunk is about protecting models, data pipelines and LLM applications from things like prompt injection, poisoning and data leakage, which is exactly what employers are worried about. A lot of the AI security certifications I have looked at this year lean much harder on governance slides, and this one does not. The weak spots are practical. Sixty minutes is not a lot of time once a couple of PBQs eat ten minutes each, so time management matters more than it should. Because the exam is so new, prep material is patchy.
I have seen Udemy courses and practice question sites that were clearly rushed out with generic AI content and a CompTIA logo. Stick to the official exam objectives PDF and check any course against it line by line. Price is another irritation. The official cert page I read did not list a voucher price, and resellers quote anything from just under $300 to around $360, so check the CompTIA store for your region before you budget. Who should take it? Security analysts, engineers and auditors who already have Security+ and are being asked about AI at work.
It is a good forcing function to learn the OWASP LLM risks, MITRE ATLAS and the basics of AI governance in one go. Who should skip it? Anyone who wants to break LLM applications for a living. For that, hands-on paths like HTB's AI Red Teamer or TCM's PAPA teach you more, and ISACA's AAISM is the better pick if you are a security manager rather than a practitioner. My overall take is that SecAI+ is a solid, slightly rushed first version. It earns a 4.0 because the blueprint is right and the brand is useful, and loses points for thin prep material and an exam that feels short for what it claims to cover.