Skip to content
News and updates

SecurityX CAS-005 in Late 2026: The Exam as It Stands

SecurityX as of October 2026: CAS-005's format, pass/fail scoring and price, how its 23 objectives are written, what CompTIA doesn't publish, and the 2027 estimate.

RB
Rachel Brown
Security Researcher
Published
Updated
Read time
3 min
On this page

SecurityX CAS-005 in Late 2026: The Exam as It Stands

CAS-005, launched on December 17, 2024, is still the only SecurityX exam twenty-two months later. CompTIA publishes no pass rates, candidate counts or score distributions for it, so there's no first-year record to review. Its format, scoring and objectives are all public, and so is a 2027 retirement estimate with no date attached.

CAS-005 at a glance

ItemCAS-005 (V5)
StatusLaunched December 17, 2024; retirement estimated 2027, no date or successor announced
QuestionsUp to 90, multiple-choice and performance-based
TimeUp to 165 minutes
ScoringPass or fail only; no scaled score
Price (US list)$544 voucher; $709 with one retake
LanguagesEnglish and Japanese; other languages "to be determined"
Recommended experience10 years of hands-on IT, 5 of them in hands-on security; nothing required
RenewalEvery three years: 75 CEUs and a $150 fee, or one qualifying activity

Pass or fail, and what that means for a retake

Security+, CySA+ and PenTest+ report a scaled score and pass at 750 on a 100 to 900 scale. SecurityX reports only the result. A fail tells you nothing about the margin, and a pass doesn't say whether you scraped through. CompTIA's retake policy is the same as for its other exams: a second attempt can follow immediately, a third needs 14 days. At $544 a sitting, book only when your practice results are consistently strong across all four domains.

How the 23 objectives are written

CompTIA's CAS-005 objectives weight Governance, Risk, and Compliance at 20%, Security Architecture at 27%, Security Engineering at 31% and Security Operations at 22%. The verbs matter more than the weights. Seventeen of the 23 objectives begin "Given a scenario" and three more "Given a set of requirements". Only three ask you to explain or summarize: compliance (1.3), the security challenges of artificial intelligence (1.5) and advanced cryptography (3.7).

So most questions put you in a situation and ask what to build, fix or choose. The engineering domain, with eight objectives, asks you to troubleshoot identity federation, email authentication and network security faults, secure operational technology and legacy systems, and automate with Python, PowerShell and Bash. CompTIA's December 2024 announcement says CAS-005 cut the objective count from CAS-004's 28 to 23. The SecurityX study guide works through each domain.

What CompTIA doesn't publish

Beyond pass rates, CompTIA doesn't say how many performance-based items a sitting includes, what share of correct answers the pass line represents, or how many people have passed CAS-005. Any figure you meet for these is unofficial, and we don't repeat them.

There's also no public sign of a successor. CompTIA's estimate of 2027 rests on its usual three-year cycle. When CAS-005 replaced CAS-004, the old exam stayed on sale until June 2025, about six months after the new one launched. If CompTIA follows the same pattern, a 2027 successor would overlap CAS-005 rather than replace it overnight, but nothing has been announced.

If you're booking in the next six months

Sit CAS-005. It's the only version, and no change to its objectives has been announced. Test in English or Japanese; CompTIA hasn't added other languages. Check the exam page again if your date slips into the second half of 2027.

If you passed under the old CASP+ name, nothing about the exam's current form affects you. The CASP+ to SecurityX rename explains what changed for holders. SecurityX sits at the top of CompTIA's certification hierarchy, so renewing it also renews CySA+, PenTest+, Security+, Network+ and A+. Choosing between SecurityX and a management credential is covered in CISM vs SecurityX.

Sources