HTB CDSA: Is It Worth It? Cost, Requirements and Alternatives (2026)

The HTB CDSA keeps coming up in SOC analyst threads, usually followed by the same three questions: what do I have to do before I can sit it, what will it actually cost me, and is it worth it compared with BTL1 or Security+?

This guide answers all three with what Hack The Box publishes on its own pages, and is clear about where we're giving an opinion. One timing note before anything else: HTB Academy prices change on 12 October 2026. If you're reading this in the days before that, the numbers you see on HTB's site today may not be the numbers you pay next week.

Disclosure: we run EpicDetect, a SOC and Security+ training site. We don't offer a proctored certification, so we're not competing with CDSA for your exam fee. Where CDSA is the better fit, we'll say so.

Last checked: October 2026.

What is the HTB CDSA?

CDSA stands for HTB Certified Defensive Security Analyst. Hack The Box lists it as one of its hands-on certifications, aimed at entry-level SOC analysts.

According to HTB's certification page, the exam is hands-on: you carry out security analysis, SOC operations and incident handling work, and you have to produce a commercial-grade report of what you found. That last part matters. A lot of entry-level exams test whether you know the answer; this one also tests whether you can write it up the way a client or manager would expect.

Hack The Box is best known for offensive labs, but the defensive side has grown: HTB says it added 191 defensive courses from LetsDefend to HTB Academy after acquiring LetsDefend in September 2025.

What are the CDSA exam requirements?

There's one hard gate: to start the exam, you must complete 100% of the "SOC Analyst" job-role path on HTB Academy. Not most of it. All of it.

That has two consequences worth thinking about:

1. Your real cost is time plus subscription. You need Academy access for as long as it takes you to finish the path, then the exam. A fast learner and a slow learner will pay different totals.
2. You arrive at the exam having done the prep. Because the path is mandatory, you can't skip straight to the test on the strength of other experience. Some people find that reassuring; others find it a hurdle.

The report requirement is the other thing to plan for. If you've never written up an investigation, practise it before the exam rather than during it.

How much does the HTB CDSA cost in 2026?

There isn't one price, because the cost depends on how you buy Academy access. Here are the routes using HTB's published pricing (source, posted 3 September 2026). All prices as of October 2026; prices change, so check their site before you buy.

Route 1: Silver Annual

• From 12 October 2026: $550/year. Includes Tier 0-II content plus 2 bundled exam vouchers: HTB CJCA and 1 Specialist certification.
• Before 12 October 2026: $490/year.

If you're planning on this route, the annual plan is the one that bundles exam vouchers. Check that your chosen voucher covers CDSA before you buy, and confirm on HTB's site that the SOC Analyst path's modules fall within the tiers your plan includes.

Route 2: Monthly plans

From 12 October 2026, HTB lists:

Monthly can make sense if you're confident you'll finish the path quickly. If you go monthly, check on HTB's site how you'd buy the exam and budget for it. We're deliberately not quoting a standalone exam voucher price here.

Which route is cheaper?

In our view, it comes down to time. If the path takes you many months, an annual plan with bundled vouchers is likely to work out better. If you'll be done in a month or two, monthly plus an exam purchase may be cheaper. Do the maths with current prices on the day you buy.

Is the HTB CDSA worth it?

Our honest view: CDSA is worth it if you want a structured, hands-on route into SOC work and you'll use the Academy path anyway. The mandatory path means you're paying for a curriculum, not just a test, and the report requirement trains a skill many juniors are weakest at.

It's a weaker fit, in our view, if:

• You need to get past HR filters fast. Many entry-level postings ask for Security+ by name. A practical cert is a strong talking point in an interview, but you may need the HR-filter cert to get the interview.
• You don't want to commit to one platform's path. The 100% path gate locks you into HTB Academy's curriculum.
• You're starting from zero. Plenty of people do start here, but fundamentals (networking, Windows, Linux, logs) make the path far less painful.

For a wider view, see our SOC analyst certifications ranked.

CDSA vs BTL1: which should you take?

Both are hands-on, entry-level blue team certifications. The differences are in how you get there.

BTL1 is sold by Centri (formerly Security Blue Team). As of October 2026 it costs £399 GBP for training and exam (source), is recommended for 0-2 years' experience, takes approximately 30 hours to complete, and gives you on-demand access to complete within 4 months. The exam is practical, and passing earns a silver challenge coin (gold for 90%+ on a first attempt). Prices change, check their site before you buy.

CDSA is gated behind 100% of HTB Academy's SOC Analyst path, is paid for through an Academy subscription (with vouchers bundled on the Silver Annual plan), and requires a commercial-grade report.

In our view:

• Pick BTL1 if you want one fixed price and a defined window.
• Pick CDSA if you want a longer structured path, value the report-writing component, or already use HTB.

We cover BTL1 in detail in our BTL1 review.

What are the best HTB CDSA alternatives?

TryHackMe SAL1

SAL1 (Security Analyst Level 1) combines multiple-choice questions with a practical section in TryHackMe's SOC simulator. TryHackMe's SOC Level 1 path has 14 modules and 65 hands-on labs (estimated 65h 29m, rated Easy). Premium subscribers get 15% off certifications and MAX gets 40% off one, as of October 2026 (source). Check their site for the current SAL1 price.

CyberDefenders CCDL1

CCDL1 is CyberDefenders' entry-level SOC analyst training and certification, covering Tier 1 SOC skills with Splunk/SPL practice in the prep. CyberDefenders shows its pricing after you create a free account, so we can't quote it here.

CompTIA Security+

Security+ is a different kind of cert: vendor-neutral and widely listed in job postings, rather than a hands-on lab exam. As of October 2026 the exam voucher is $425 USD (see our Security+ cost breakdown); prices change, check CompTIA's site before you buy. The current exam, SY0-701, retires on 11 June 2027, and the next version, SY0-801, is expected around 17 November 2026. More in our SY0-801 guide.

Many people pair Security+ (for the filter) with one practical cert (for the interview).

LetsDefend paths

LetsDefend, owned by Hack The Box since September 2025, offers SOC Analyst, Incident Responder and Detection Engineering career paths with certificates of completion on paid plans. These are certificates of completion rather than an exam. As of October 2026, VIP is $24.99/month or $16.99/month billed annually (source). Prices change, check their site before you buy.

CDSA vs alternatives: comparison table

Prices as of October 2026; check each provider's site before you buy.

FAQ

What do I need to do before taking the HTB CDSA exam?

You must complete 100% of the "SOC Analyst" job-role path on HTB Academy before you can start the exam.

How much does the HTB CDSA cost?

It depends on your Academy plan. From 12 October 2026, Silver Annual is $550/year and bundles two exam vouchers (HTB CJCA plus one Specialist certification), so check that your voucher covers CDSA. Before 12 October it's $490/year. Monthly plans run from $10 (Student) to $125 (Platinum). Check HTB's site for current pricing.

Is CDSA better than BTL1?

Neither is simply better. BTL1 is a fixed £399 package with a 4-month window; CDSA comes through an Academy subscription, requires the full SOC Analyst path and a commercial-grade report. Pick the format that fits your budget and timeline.

Is CDSA good for beginners?

HTB aims it at entry-level SOC analysts. In our view, solid fundamentals in networking, Windows, Linux and logs make the mandatory path much smoother.

Should I get Security+ or CDSA first?

If job postings in your area ask for Security+ by name, many people get it first for the HR filter and then add a practical cert. If you already have interviews, a hands-on cert like CDSA can give you more to talk about.

How EpicDetect Can Help

If Security+ is part of your plan, start with our free 20-question Security+ practice test. No account needed. It scores you against the pass line and shows your weakest domain.

Want to know whether SOC investigation work suits you before you commit to a long cert path? Adventures Season Zero is five free episodes of one continuous SOC investigation, roughly 3-4 hours in total. We don't offer a proctored cert or forensics labs, but it's a free way to practise the thinking.

When you want the full Security+ track, timed exam simulator and flashcards, Premium is $25/month with a 7-day free trial. Start free. No card needed.

Sources

• HTB Academy new pricing (posted 3 Sept 2026)
• HTB CDSA certification page
• HTB acquires LetsDefend
• Centri BTL1
• TryHackMe pricing
• TryHackMe SOC Level 1 path
• TryHackMe SAL1
• CyberDefenders CCDL1
• LetsDefend pricing