Security+ is a vendor-neutral, defense-focused foundational cert from CompTIA; CEH is an offensive, ethical-hacking cert from EC-Council. They approach security from opposite sides, and Security+ is usually earned first.
Last updated June 2026
| Aspect | Security+ | CEH |
|---|---|---|
| Vendor | CompTIA | EC-Council |
| Angle | Broad, defense-oriented baseline | Offensive: ethical hacking and penetration-testing techniques |
| Level | Foundational | Intermediate |
| Prerequisites | None (about two years recommended) | Official training, or two years of security experience plus an application |
| Exam | One exam, up to 90 questions, 90 minutes | 125 questions, 4 hours |
| Passing score | 750 on a 100 to 900 scale | A variable cut score, roughly 60 to 85 percent |
| Cost (US, approx) | About $425 | Roughly $950 to $1,200, usually bundled with training |
| Best for | Breaking into security or a SOC role, DoD 8140 baseline | Aspiring penetration testers and red teamers |
Exam prices are approximate US list prices and change over time and by region and reseller. Check the certifying body for the current figure before you buy.
Security+ is the better first cert for almost everyone: it is cheaper, broader, and the baseline employers ask for. CEH makes sense later if you specifically want offensive security or penetration testing. Start with Security+, then specialize.
Reading the difference is a start. SecPlus Mastery drills it with over 1,000 practice questions, timed mock exams, and spaced review across all five SY0-701 domains, so it sticks for exam day.
Written to the CompTIA Security+ SY0-701 objectives. CompTIA and Security+ are trademarks of CompTIA, used here for identification only.