Most cybersecurity certification exams cost between $130 and $1,199 per attempt in the US. Entry-level exams sit at the low end: the ISC2 Certified in Cybersecurity (CC) costs $199, and CompTIA Security+ costs $439. Advanced credentials such as the CISSP ($749), GIAC certifications ($999), and the CEH (up to $1,199) cost the most.
The exam fee is only the first payment. Most credentials also carry a renewal fee, and some charge every year. This guide compares eight popular certifications, then breaks down retakes, renewals, prep, and what the job market pays.
ISC2 Certified in Cybersecurity (CC), the lowest-priced ISC2 exam
per attempt in the Americas, plus $50 a year once certified
How Much Do Cybersecurity Certifications Cost?
Each certifying body sets its own price, so fees vary widely. The table below lists the standard US exam fee for each credential and what it costs to keep. Prices come straight from CompTIA, ISC2, ISACA, EC-Council, GIAC, and Splunk.
Compared
Cybersecurity Certification Exam Fees at a Glance
| Certification | Level | Exam fee | Upkeep |
|---|---|---|---|
| ISC2 Certified in Cybersecurity (CC) | Entry | $199 | $50 a year |
| CompTIA Security+ | Entry | $439 | $150 every 3 years |
| CompTIA CySA+ | Mid | $439 | $150 every 3 years |
| Splunk Certified Cybersecurity Defense Analyst | Mid | $130 | Set by Splunk |
| ISC2 CISSP | Advanced | $749 | $135 a year |
| ISACA CISM | Advanced | $575 members, $760 non-members | $45 or $85 a year |
| EC-Council CEH | Advanced | $950 online, $1,199 at a test center | $80 a year |
| GIAC Security Essentials (GSEC) | Advanced | $999 | $499 every 4 years |
US list prices published by each certifying body, checked Oct 5, 2026. Exam fees are per attempt. Full references in the Sources section.
A few of these prices have changed recently. CompTIA charged $439 for both Security+ and CySA+ vouchers when we checked, up from the $425 it announced for CySA+ in June 2026. The CEH price depends on where you test, and ISACA members pay $185 less for the CISM exam than non-members. Our guide to what the Security+ exam costs covers CompTIA’s bundles in detail.
Which Certification Fits Your Career Stage?
The right credential depends on your experience, because higher-level exams assume years of hands-on work. Starting with an entry-level exam keeps your first outlay low. It also builds the knowledge the advanced exams test.
Entry-Level Certifications
The ISC2 CC is built for newcomers and requires no work experience. Its $199 exam covers five domains, from security principles to incident response. Once certified, you pay a $50 annual maintenance fee.
CompTIA Security+ is the other common starting point. Its SY0-701 exam has up to 90 questions in 90 minutes, and you need 750 on a 100 to 900 scale to pass. CompTIA recommends Network+ and two years of security or systems administration work first.
Mid-Level Certifications
CompTIA CySA+ is the credential most closely tied to the cybersecurity analyst role. The current V4 exam (CS0-004) launched on June 23, 2026, with up to 85 questions in 165 minutes. CompTIA recommends about four years in a security operations center (SOC) or vulnerability analyst role. For voucher bundles and renewal details, see our CySA+ price breakdown.
Splunk offers a lower-cost alternative for analysts who work with its tools. The Splunk Certified Cybersecurity Defense Analyst exam costs $130, with 66 questions in 75 minutes and no prerequisites. Splunk designed it for people who use Splunk Enterprise and Enterprise Security on the job.
Advanced Certifications
The CISSP from ISC2 costs $749 and asks for five years of paid work across two or more of its eight domains. Candidates who pass without that experience can become an Associate of ISC2 while they build it.
GIAC certifications, including the GSEC, cost $999 per attempt. The GSEC exam has 106 questions over four hours, with a passing score of 72%. EC-Council’s CEH voucher costs $950 for remote proctoring or $1,199 at a Pearson VUE center.
Other ISC2 specialist exams, including the CCSP and CSSLP, cost $599 each. For security leadership, ISACA’s exam costs $575 for members and $760 for everyone else. Our breakdown of CISM exam and membership fees explains when joining ISACA pays off.
Is There a Free Cybersecurity Certification?
ISC2’s free CC program is closing, so most new candidates now pay the standard $199 exam fee. Starting May 20, 2026, ISC2 stopped accepting new participants in its One Million Certified in Cybersecurity program. Anyone holding an unexpired exam code from that program can still take the exam by December 31, 2026.
The program left a large mark on the field. Since August 2022, it gave more than 1 million people free access to the CC course and exam. More than 65,000 of them went on to earn the certification.
Whether we’re talking about skills needs, economic constraints, geopolitical threats or uncertainty around AI, quantum and other emerging technologies, the cybersecurity workforce faces serious challenges. Serious challenges require big, bold initiatives.
Scott Beale, CEO of ISC2, in 2026
Free training is still easy to find. Fortinet offers free self-paced courses for its NSE 1, NSE 2, and NSE 3 levels, covering security fundamentals and firewall basics. They won’t replace a vendor-neutral exam, but they add hands-on product knowledge at no cost.
What Do Retakes and Renewals Cost?
Plan for a retake before you book, because most certifying bodies charge the full price again. CompTIA states that candidates must pay the exam price each time they attempt the exam. It has no waiting period before a second attempt, but you must wait 14 days before a third.
- CompTIA: a full new voucher for each retake, or $579 for a voucher with Retake Assurance
- ISC2: the full exam fee for each attempt, with 30, 60, then 90 test-free days between attempts
- GIAC: $899 for a retake on most certifications
- EC-Council: $500 for a CEH retake voucher with remote proctoring
A CompTIA voucher with Retake Assurance costs $579, or $140 more than a single $439 voucher. A second full-price voucher would cost $439, so the bundle saves money if you need another try.
Renewal fees are the cost that keeps coming. Every certification in this guide expires unless you earn continuing education credits and pay an upkeep fee.
- CompTIA Security+ and CySA+: $150 per three-year cycle, plus 50 or 60 continuing education units (CEUs)
- ISC2: $135 a year for CISSP and its other full certifications, or $50 a year for CC
- ISACA CISM: $45 a year for members or $85 for non-members
- EC-Council CEH: $80 a year
- GIAC: $499 every four years, or $249 for extra renewals within two years
ISC2 charges one annual fee however many of its certifications you hold. That makes stacking ISC2 credentials cheaper to maintain than mixing several certifying bodies.
How Much Does Exam Prep Add?
Preparation can cost nothing or more than the exam itself, depending on how you study. CompTIA’s own CertMaster products show the range for Security+ and CySA+.
- CertMaster Study: $149 for a self-paced study resource
- CertMaster Practice: $209 for practice tests
- CertMaster Learn for Security+: $599 for the interactive course
- Exam bundles: $593 to $1,058, depending on the study tools and retake option
GIAC sells a $399 practice test for most of its exams, and ISC2 offers several free study aids alongside paid training. Many employers fund certifications for staff, so ask about a training budget before you pay yourself. If you learn best with guidance, a private tutor can focus on the domains where you need the most help.
Are Cybersecurity Certifications Worth the Cost?
For most people in the field, the numbers favor certification. Information security analysts earned a median of $129,180 a year in May 2025, according to the US Bureau of Labor Statistics. Next to that salary, even a $1,199 exam is a modest cost.
Demand is growing quickly. The BLS projects employment of information security analysts to grow 21% from 2025 to 2035. It expects about 14,100 openings each year over that decade.
Most analysts hold a bachelor’s degree, but the BLS notes that some enter with a high school diploma plus industry training and certifications. For career changers, an affordable exam like the CC or Security+ can be a practical first step.
Timing matters too. CompTIA expects to launch Security+ V8 on or around November 17, 2026, and the current English exam retires on June 11, 2027. Check which version you are buying before you schedule.
Sources
- "Security+ (Plus) Certification V7," CompTIA. Available at: https://www.comptia.org/en-us/certifications/security/v7/. Accessed 5 Oct. 2026.
- "Security+ (Plus) Certification," CompTIA. Available at: https://www.comptia.org/en-us/certifications/security/. Accessed 5 Oct. 2026.
- "CySA+ Certification V4 (New Version)," CompTIA. Available at: https://www.comptia.org/en-us/certifications/cybersecurity-analyst/v4/. Accessed 5 Oct. 2026.
- "CompTIA CySA+ V4 Exam: Your Questions Answered," CompTIA, 2026. Available at: https://www.comptia.org/en-us/blog/the-new-comptia-cybersecurity-analyst-cysa-your-questions-answered/. Accessed 5 Oct. 2026.
- "CompTIA Certification Retake Policy," CompTIA. Available at: https://www.comptia.org/en-us/resources/test-policies/comptia-certification-retake-policy/. Accessed 5 Oct. 2026.
- "Continuing Education Renewal Fees," CompTIA. Available at: https://www.comptia.org/en-us/resources/ce/learn/continuing-education-renewal-fees/. Accessed 5 Oct. 2026.
- "Earn Continuing Education Units (CEUs)," CompTIA. Available at: https://www.comptia.org/en-us/resources/ce/learn/earn-continuing-education-units-ceus/. Accessed 5 Oct. 2026.
- "How Much Do ISC2 Certification Exams Cost?," ISC2. Available at: https://www.isc2.org/register-for-exam/isc2-exam-pricing. Accessed 5 Oct. 2026.
- "CC Certified in Cybersecurity," ISC2. Available at: https://www.isc2.org/certifications/cc. Accessed 5 Oct. 2026.
- "ISC2 Annual Maintenance Fees (AMF): Frequently Asked Questions," ISC2. Available at: https://www.isc2.org/policies-procedures/amfs-overview. Accessed 5 Oct. 2026.
- "What To Do After Your ISC2 Certification Exam," ISC2. Available at: https://www.isc2.org/exams/after-your-exam. Accessed 5 Oct. 2026.
- "ISC2 Provided 1 Million People Globally with Free Access to the Certified in Cybersecurity Certification Course and Exam," ISC2, 22 Apr. 2026. Available at: https://www.isc2.org/Insights/2026/04/one-million-certified-cyber-conclusion. Accessed 5 Oct. 2026.
- "CISSP Certified Information Systems Security Professional," ISC2. Available at: https://www.isc2.org/certifications/cissp. Accessed 5 Oct. 2026.
- "CISSP Experience Requirements," ISC2. Available at: https://www.isc2.org/certifications/cissp/cissp-experience-requirements. Accessed 5 Oct. 2026.
- "CISSP Self-Study Resources," ISC2. Available at: https://www.isc2.org/certifications/cissp/cissp-self-study-resources. Accessed 5 Oct. 2026.
- "Earn a CISM Certification," ISACA. Available at: https://www.isaca.org/credentialing/cism/get-cism-certified. Accessed 5 Oct. 2026.
- "Maintain CISM Certification," ISACA. Available at: https://www.isaca.org/credentialing/cism/maintain-cism-certification. Accessed 5 Oct. 2026.
- "CEH Exam Voucher (Remote Proctoring)," EC-Council Store. Available at: https://store.eccouncil.org/product/ceh-ecc-exam-center-voucher/. Accessed 5 Oct. 2026.
- "CEH Exam Voucher (Pearson VUE)," EC-Council Store. Available at: https://store.eccouncil.org/product/ceh-vue-exam-voucher/. Accessed 5 Oct. 2026.
- "CEH Retake Exam Voucher," EC-Council Store. Available at: https://store.eccouncil.org/product/ceh-retake-exam-voucher-ecc-exam-center/. Accessed 5 Oct. 2026.
- "CPE Policy," EC-Council. Available at: https://cert.eccouncil.org/cpe-policy.html. Accessed 5 Oct. 2026.
- "GIAC Certification Pricing and Fees," GIAC. Available at: https://www.giac.org/pricing. Accessed 5 Oct. 2026.
- "GIAC Security Essentials (GSEC)," GIAC. Available at: https://www.giac.org/certifications/security-essentials-gsec/. Accessed 5 Oct. 2026.
- "Splunk Certified Cybersecurity Defense Analyst," Splunk. Available at: https://www.splunk.com/en_us/training/certification-track/splunk-certified-cybersecurity-defense-analyst.html. Accessed 5 Oct. 2026.
- "Free Cybersecurity Training for Professionals," Fortinet Training Institute. Available at: https://www.fortinet.com/training/cybersecurity-professionals. Accessed 5 Oct. 2026.
- "Information Security Analysts," Occupational Outlook Handbook, U.S. Bureau of Labor Statistics, 2026. Available at: https://www.bls.gov/ooh/computer-and-information-technology/information-security-analysts.htm. Accessed 5 Oct. 2026.
Summarize with AI:
Did you like this article? Leave a rating!
Loading...
