
CompTIA SecAI+ (CY0-001)
Exam CY0-001 CompTIA Advanced
CompTIA's AI security certification: how AI works, how AI systems are attacked and secured, how to use AI in security operations, and how AI is governed. Four exam domains, every AI attack explained, then practice tests.
8 courses · 110 sections · 587 lectures · 34 labs · ≈ 42 h of hands-on labs
All 34 CY0-001 hands-on labs on one page →
Free to start: the free lessons and guides for this roadmap →
Free resources to get you started
- Free videoEvery CompTIA SecAI+ Objective Explained
Exam domains
- Basic AI Concepts Related to Cybersecurity — 17%
- Securing AI Systems — 40%
- AI-assisted Security — 24%
- AI Governance, Risk, and Compliance — 19%
Try a free AI security lab: Make it talk (~5 min) → A scripted simulation in your browser. No account needed.
The path
Start here →
Step 1 — Learn the exam material
Cover all four CY0-001 domains end to end.
3 courses · 72 sections · 407 lectures
Learn
- CourseTotal: CompTIA SecAI+ (CY0-001) Complete Course (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
14 sections · 75 lectures
- Course Overview 1
- Introduction 5
- Foundations & Exam Context 4
- Training & Optimization 3
- The Art of the Prompt 3
- Data Integrity & RAG 3
- The Secure AI Lifecycle 2
- Threat Modeling Frameworks 5
- Model Defenses & Guardrails 6
- Infrastructure & Access Control 8
- Monitoring & Attack Analysis 8
- AI-Assisted Security Ops 15
- AI Governance & Risk 11
- Audio Version of Training 1
- CourseCompTIA SecAI+ (CY0-001) Complete Course from CertMike! (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
30 sections · 143 lectures
- Training Overview 1
- Introduction 1
- The SecAI+ Exam 4
- Domain 1 Basic AI Concepts Related to Cybersecurity 1
- Types of AI 6
- Model Training Techniques 6
- Prompt Engineering 5
- Data Processing 8
- Retrieval-Augmented Generation (RAG) 4
- Security in the AI Lifecycle 8
- Human-Centric AI Design 4
- Domain 2 Securing AI Systems 1
- Data and Training Attacks 6
- Prompt and Input Manipulation Attacks 3
- Model Extraction and Information Leakage Attacks 4
- Integration and Operational Attacks 9
- AI Security Controls 4
- AI Access Controls 6
- Encryption and Data Safety 6
- AI Monitoring and Auditing 7
- Domain 3 AI-assisted Security 1
- AI-Assisted Security Tools 6
- AI Security Use Cases 5
- AI-Enabled Attacks 7
- Automating Security Tasks 6
- Domain 4 AI Governance, Risk, and Compliance 1
- AI Governance 4
- AI Risks 10
- AI Compliance 8
- Audio Version of the Course 1
- CourseCompTIA SecAI+ (CY0-001) Complete Course & Exam Prep (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
28 sections · 189 lectures
- Training Overview 1
- Introduction 4
- DOMAIN 1 BASIC AI CONCEPTS RELATED TO CYBERSECURITY 7
- CompTIA SecAI+ NLP and Language Models Certification Guide 4
- CompTIA SecAI+ Model Training Techniques Certification Guide 5
- CompTIA SecAI+ Prompt Engineering Certification Exam Guide 4
- CompTIA SecAI+ Data Security for AI Certification Guide 5
- CompTIA SecAI+ AI Data Types and Structures Guide 3
- CompTIA SecAI+ Retrieval-Augmented Generation Certification Guide 2
- CompTIA SecAI+ AI Security Lifecycle Certification Guide 6
- DOMAIN 2 SECURING AI SYSTEMS 7
- CompTIA SecAI+ AI Security Controls Certification Guide 10
- CompTIA SecAI+ AI Access Controls Certification Guide 4
- CompTIA SecAI+ AI Data Security Controls Guide 8
- CompTIA SecAI+ AI Monitoring and Auditing Guide 7
- CompTIA SecAI+ AI Attack Vectors Certification Guide 20
- CompTIA SecAI+ AI Compensating Controls Guide 9
- DOMAIN 3 AI-ASSISTED SECURITY CompTIA SecAI+ AI-Enabled Security Tools Guide 7
- CompTIA SecAI+ AI Security Use Cases Guide 11
- CompTIA SecAI+ AI-Enhanced Attack Vectors Guide 13
- CompTIA SecAI+ AI Security Automation Guide 6
- CompTIA SecAI+ CICD and AI Automation Certification Guide 7
- DOMAIN 4 AI GOVERNANCE, RISK, AND COMPLIANCE 3
- CompTIA SecAI+ AI Security Roles Certification Guide 10
- CompTIA SecAI+ Responsible AI Certification Guide 10
- CompTIA SecAI+ AI Risk Management Certification Guide 7
- CompTIA SecAI+ Compliance Frameworks Certification Guide 8
- Audio Version of the Course 1
Start with Total: CompTIA SecAI+ (CY0-001) Complete Course, the reference course. The other two cover the same objectives from different angles.
Step 2 — Basic AI concepts
Domain 1: the kinds of AI, how models are trained and prompted, RAG, and security across the AI life cycle.
3 labs
Learn
- CourseCovered in CompTIA SecAI+ (CY0-001) Complete Course from CertMike! (opens in a new tab)opens on courses.stationx.net — Domain 1 sections: types of AI, prompt engineering, data processing, RAG, security in the AI life cycle 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
30 sections · 143 lectures
- Training Overview 1
- Introduction 1
- The SecAI+ Exam 4
- Domain 1 Basic AI Concepts Related to Cybersecurity 1
- Types of AI 6
- Model Training Techniques 6
- Prompt Engineering 5
- Data Processing 8
- Retrieval-Augmented Generation (RAG) 4
- Security in the AI Lifecycle 8
- Human-Centric AI Design 4
- Domain 2 Securing AI Systems 1
- Data and Training Attacks 6
- Prompt and Input Manipulation Attacks 3
- Model Extraction and Information Leakage Attacks 4
- Integration and Operational Attacks 9
- AI Security Controls 4
- AI Access Controls 6
- Encryption and Data Safety 6
- AI Monitoring and Auditing 7
- Domain 3 AI-assisted Security 1
- AI-Assisted Security Tools 6
- AI Security Use Cases 5
- AI-Enabled Attacks 7
- Automating Security Tasks 6
- Domain 4 AI Governance, Risk, and Compliance 1
- AI Governance 4
- AI Risks 10
- AI Compliance 8
- Audio Version of the Course 1
Practise
- Infra LabsAzure Artificial Intelligence — 3 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Working with AI Prompts in Azure OpenAI StudioLevel: GuidedDuration: 30 min
- Configure AI Prompts by Using Company DataLevel: GuidedDuration: 30 min
- Creating a Chatbot from a Custom AI PromptLevel: GuidedDuration: 30 min
Step 3 — Securing AI systems
Domain 2: threat-model an AI system and put the access, data, guardrail and monitoring controls around it. The labs drill the web flaws AI apps inherit: injection and unsafe output handling.
1 course · 11 sections · 47 lectures · 13 labs
Learn
- CourseGenerative AI Risks & Cybersecurity: LLM Security (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
11 sections · 47 lectures
- Training Overview 1
- - Introduction & Lab Setup 4
- - The GenAI Threat Landscape 4
- - Prompt Injection & Jailbreaking 6
- - AI-Specific Attack Vectors 6
- - Defending GenAI Systems 8
- - Secure GenAI Development 5
- - Governance, Compliance & Ethics 6
- - Emerging Threats & Future 4
- - Capstone & Conclusion 2
- Audio Version of the Course 1
No AI-security labs exist yet: these are classic web-application labs, not attacks on an AI model. Only the three Azure AI labs in Step 2 involve AI.
Practise
- LabsIntroduction To OWASP Top Ten — 13 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- OWASP Top Ten 2025 - A01 Broken Access ControlsDuration: 1 h
- OWASP Top Ten 2025 - A02 Security MisconfigurationDuration: 1 h
- OWASP Top Ten 2025 - A03 Software Supply Chain FailuresDuration: 1 h
- OWASP Top Ten 2025 - A04 Cryptographic FailuresDuration: 1 h
- OWASP Top Ten 2025 - A05 InjectionDuration: 1 h
- OWASP Top Ten 2025 - A06 Insecure DesignDuration: 1 h
- OWASP Top Ten 2025 - A07 Authentication FailuresDuration: 1 h
- OWASP Top Ten 2025 - A08 Software or Data Integrity FailuresDuration: 1 h
- OWASP Top Ten 2025 - A09 Security Logging & Alerting FailuresDuration: 1 h
- OWASP Top Ten 2025 - A10 Mishandling of Exceptional ConditionsDuration: 1 h
- OWASP Top Ten 2025 - CapstoneDuration: 3 h
- OWASP Top Ten 2025 - Capstone (pt.1)Duration: 1 h 30 min
- OWASP Top Ten 2025 - Capstone (pt.2)Duration: 1 h 30 min
- FreeLLM Security Best Practices: 7 Steps
- FreeAI Guardrails: How to Build AI You Can Trust
- FreeAI Agent Security
- FreeNeMo Guardrails Tutorial
- FreeLLM Guard Is Archived: What to Use Instead
- Free videoThe OWASP Top 10 for LLM Apps
- Free videoWhat Is a Prompt Firewall?
- Free video6 Prompt Firewalls That Stop Your AI Being Hijacked
- Free videoStop Treating AI Like Normal Software
- Free videoThe #1 AI Security Mistake Every Company Makes
- FreeAI Red Teaming Tools
- FreeAI Security Tools Mapped
Step 4 — Every AI attack, explained
Objective 2.6: recognise each attack on an AI system from its evidence, and the control that stops it.
Learn
- CourseCovered in CompTIA SecAI+ (CY0-001) Complete Course from CertMike! (opens in a new tab)opens on courses.stationx.net — attack sections: data and training attacks, prompt and input manipulation, model extraction and information leakage, integration and operational attacks 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
30 sections · 143 lectures
- Training Overview 1
- Introduction 1
- The SecAI+ Exam 4
- Domain 1 Basic AI Concepts Related to Cybersecurity 1
- Types of AI 6
- Model Training Techniques 6
- Prompt Engineering 5
- Data Processing 8
- Retrieval-Augmented Generation (RAG) 4
- Security in the AI Lifecycle 8
- Human-Centric AI Design 4
- Domain 2 Securing AI Systems 1
- Data and Training Attacks 6
- Prompt and Input Manipulation Attacks 3
- Model Extraction and Information Leakage Attacks 4
- Integration and Operational Attacks 9
- AI Security Controls 4
- AI Access Controls 6
- Encryption and Data Safety 6
- AI Monitoring and Auditing 7
- Domain 3 AI-assisted Security 1
- AI-Assisted Security Tools 6
- AI Security Use Cases 5
- AI-Enabled Attacks 7
- Automating Security Tasks 6
- Domain 4 AI Governance, Risk, and Compliance 1
- AI Governance 4
- AI Risks 10
- AI Compliance 8
- Audio Version of the Course 1
- FreeAI Attacks Explained: 23 Types
- FreePrompt Injection Examples & Attack Techniques
- Free videoWhat Is Direct Prompt Injection?
- Free videoWhat Is Indirect Prompt Injection?
- Free video6 Prompt Injection Examples You Need to Know
- Free videoHow Hackers Hijack AI With One Sentence
- Free videoWhat Is AI Jailbreaking?
- Free videoWhat Is Guardrail Bypassing?
- FreeAI Is About to Forget How to Hack
- Free videoWhat Is Data Poisoning?
- Free videoWhat Is Model Poisoning?
- Free videoWhat Is AI Recommendation Poisoning?
- Free videoAI Poisoning
- Free videoCan Hackers Silently Corrupt Your AI?
- Free videoWhat Is an AI Backdoor?
- Free videoWhat Is an AI Trojan?
- Free videoWhat Is a Transfer Learning Attack?
- Free videoWhat Is an Adversarial Attack?
- Free videoWhat Is an AI Bias Attack?
- Free videoCan AI Be Accidentally Racist?
- Free videoWhat Is Model Skewing?
- Free videoWhat Is AI Model Theft?
- Free videoHow to Steal an AI Model in 3 Steps
- Free videoWhat Is an AI Model Inversion Attack?
- Free videoWhat Is a Membership Inference Attack?
- Free videoWhat Is AI Sensitive Information Disclosure?
- Free videoWhat Is Insecure Plugin Design?
- Free videoWhat Is AI Plugin Exploitation?
- Free videoWhat Is an AI Supply Chain Attack?
- Free videoWhat Is Excessive Agency?
- Free videoCan AI Be Tricked Into Deleting Your Database?
- Free videoYour AI Chatbot Has Keys to Everything
- Free videoWhat Is an Output Integrity Attack?
- Free videoWhat Is Insecure Output Handling?
- Free videoWhat Is AI Denial of Service?
- Free videoWhat Is AI Overreliance?
- Free videoYour AI Is Making Things Up
- FreeHow OpenAI's AI Hacked Hugging Face
Step 5 — AI-assisted security
Domain 3: use AI tools to defend and to test, automate security tasks, and know how attackers use AI too. The labs are the threat-intelligence work AI tools speed up.
2 courses · 20 sections · 118 lectures · 18 labs
Learn
- CourseChatGPT for SOC Analyst: Master Cyber Security with AI (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
7 sections · 59 lectures
- Training Overview 2
- A Sneek Peek into Cyber Security Mastery with ChatGPT 1
- Getting Started with ChatGPT for Cyber Security 17
- Advanced Prompts with ChatGPT 5 for Cyber Security Analyst 16
- Master Cloud Security with ChatGPT in Azure 11
- Enhance Incident Investigation with ChatGPT and SIEM Solution 11
- Audio Version of Training 1
- CourseMastering Cybersecurity with ChatGPT: From Basics to Specialist (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
13 sections · 59 lectures
- Training Overview 2
- Course Materials 3
- Introducion 11
- Cyber Security Specialist 3
- ISO 27001:2022 6
- Cyber Security Assignment 4
- Technical Activities withing ChatGPT 2
- Plugin Utilization 9
- Creating AI Tool using ChatGPT 5
- Cyber Security Jobs using ChatGPT 3
- The Book: Mastering Cybersecurity with ChatGPT 1
- Working with API in ChatGPT 9
- Audio Version of the Training 1
No AI-assisted security labs exist yet: these threat-intelligence labs use no AI tools.
Practise
- LabsThreat Intelligence & Defense — 18 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Analyze Various Data Sources to Confirm Suspected InfectionDuration: 1 h
- Assessing Vulnerabilities Post AddressalDuration: 1 h
- BitCoin Mining Web Application on Corporate NetworkDuration: 1 h
- Check for Indicators of Other Attack Activity (Debug PE File)Duration: 2 h
- Cyber Security Evaluation Tool (CSET)Duration: 5 h
- Entering Information into a CMDBDuration: 1 h
- Event Logs with AutopsyDuration: 1 h
- Internet HistoryDuration: 1 h
- MITRE - DefendDuration: 1 h
- Nexpose: Red Team ExploitationDuration: 1 h
- Overview of KibanaDuration: 1 h
- Performing an Initial Attack AnalysisDuration: 1 h
- Preparing Target MediaDuration: 1 h
- Recover from Illegal Bitcoin Mining IncidentDuration: 1 h
- Recover from Web-Based Flashpack IncidentDuration: 1 h
- Report Writing for Presentation to ManagementDuration: 1 h
- Respond to and Validate Alerts from Antivirus SoftwareDuration: 1 h
- WMI Event PersistenceDuration: 2 h
- FreeHow to Use ChatGPT and AI for Cyber Security
- FreeTop Cyber Security GPTs and How to Use Them
- FreeWhat Is Microsoft Security Copilot?
- FreeAI Penetration Testing: Hype or Real?
- FreeBest AI for Hacking? How to Actually Choose
- FreeChatGPT for Hacking
- FreeAI Google Dork Generator
- Free videoMy AI Hacked a Plugin Running on 4M WordPress Sites
- Free videoAI Found 500 Vulnerabilities. You're Not Allowed To.
- Free videoCan AI Actually Pentest For You?
- Free video3 Words That Fix Your Security Prompts
- FreeAI Social Engineering: The Con Man That Never Sleeps
- FreeHow to Use AI for Social Engineering
- Free videoAre Hackers Using Your Posts?
- Free videoAI Attacks Learn While They Hit You
- FreeDeepfake Statistics: Growth, Fraud & Detection
- Free video6 Tools to Catch Deepfakes (Video, Voice and Images)
- FreeBeware Deepfake Voice Scams
Step 6 — AI governance, risk and compliance
Domain 4: the governance structures, risks and regulations that decide how AI may be built and used.
Learn
- CourseCovered in CompTIA SecAI+ (CY0-001) Complete Course from CertMike! (opens in a new tab)opens on courses.stationx.net — Domain 4 sections: AI governance, AI risks, AI compliance 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
30 sections · 143 lectures
- Training Overview 1
- Introduction 1
- The SecAI+ Exam 4
- Domain 1 Basic AI Concepts Related to Cybersecurity 1
- Types of AI 6
- Model Training Techniques 6
- Prompt Engineering 5
- Data Processing 8
- Retrieval-Augmented Generation (RAG) 4
- Security in the AI Lifecycle 8
- Human-Centric AI Design 4
- Domain 2 Securing AI Systems 1
- Data and Training Attacks 6
- Prompt and Input Manipulation Attacks 3
- Model Extraction and Information Leakage Attacks 4
- Integration and Operational Attacks 9
- AI Security Controls 4
- AI Access Controls 6
- Encryption and Data Safety 6
- AI Monitoring and Auditing 7
- Domain 3 AI-assisted Security 1
- AI-Assisted Security Tools 6
- AI Security Use Cases 5
- AI-Enabled Attacks 7
- Automating Security Tasks 6
- Domain 4 AI Governance, Risk, and Compliance 1
- AI Governance 4
- AI Risks 10
- AI Compliance 8
- Audio Version of the Course 1
- FreeAI Governance Framework: 10 Questions to Ask
- Free videoAI Governance: 10 Questions You Must Ask
- FreeAI Regulations Around the World
- FreeAI Regulation News: Who Really Controls AI Now
- FreeShadow AI: What Works to Reduce the Risk
- FreeShadow AI Statistics
- Free video6 Tools to Find the Shadow AI Your Staff Are Already Using
- FreeAI's Dual-Use Problem: 6 Proposed Fixes
- Free videoCan a Chatbot Make a Promise Your Company Has to Keep?
Before the exam
- FreeSecAI+ Passing Score
- FreeCompTIA Certification Cost Guide
- CourseCompTIA SecAI+ v1 Practice Tests (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
4 sections · 9 lectures
- SecAI+ v1 Practice Tests 3
- Practice Scenario-Based Question by Question 1
- Practice Questions per Domain 4
- Next Steps & Certification 1
- CourseCompTIA SecAI+ Practice Flashcards (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
3 sections · 6 lectures
- Practice Questions 1
- Practice Flashcards 4
- Next Steps & Certification 1

Book the exam · StationX is a CompTIA Authorized Partner
Official SecAI+ exam voucher, for less than CompTIA's price

Sold by StationX, a CompTIA Authorized Partner: you get a genuine CompTIA code by email within 1 working day (up to 5 in some countries) and sit the official exam.
Save 53%Exam voucher · RetakeSecAI+ voucher + Retake AssuranceOne exam attempt, plus a free second attempt if you don't pass first time.$282.00
$596.00Save $314.00Get the voucher Save 15%Exam voucherSecAI+ exam voucherOne exam attempt, for the country you sit the exam in.$253.30
$298.00Save $44.70Get the voucher
100% official CompTIA productsCode by email within 1 working day (up to 5 in some countries)Today's prices in USD; the product page shows the price for the country you sit the exam in
Where this leads
Explore free resources
Choose your next roadmap
AI Security Engineer — career path



ISACA AAISM (Advanced in AI Security Management)

CISSP — Certified Information Systems Security Professional

CISM — Certified Information Security Manager

Next level
AI-Driven Security Engineering
After this roadmap: direct AI to build real security solutions. “No coding background required. You direct the AI; the AI does the building.”
See the AI-Driven Security Engineering Master’s →