- The Cost at a Glance
- The USD 450 Voucher: What You Are Actually Buying
- Two Routes to Eligibility, Two Different Price Tags
- Training Bundles and eCourseware: Included Fees vs. Separate Fees
- Cost Traps: Voucher Validity, Approval Windows and Retakes
- Keeping the Credential: Renewal and Continuing Education Costs
- Where Preparation Money Pays Off Most
- Three Budget Scenarios
- Weighing the Spend Against the Outcome
- Frequently Asked Questions
- The official CSAv2 Exam Voucher (remote proctored, exam 312-39) costs USD 450.
- Self-study candidates add a USD 100 nonrefundable eligibility application fee and need one year of verified experience.
- Official training fees include the USD 100 application charge; the self-study route pays it separately.
- Staying certified costs USD 80 per year, USD 240 over three years, plus 120 CPE/ECE credits.
The Cost at a Glance
The Certified SOC Analyst (CSA) v2 credential from EC-Council has one fixed anchor price and several variable layers around it. The anchor is the exam voucher. Everything else depends on how you qualify to sit the exam, whether you buy official training, and how you plan to maintain the credential after you pass. Understanding those layers before you spend a dollar is the difference between a clean USD 450 exam attempt and an accidental stack of purchases that do not do what you thought they did.
This guide covers only the Certified SOC Analyst credential (exam 312-39). Other certifications share the "CSA" abbreviation, and their pricing does not apply here. If you are still orienting yourself, start with What Is CSA Certification? and come back for the numbers.
| Cost Item | Amount | Applies To |
|---|---|---|
| CSAv2 Exam Voucher (remote proctored) | USD 450 | Every candidate |
| Eligibility application fee | USD 100, nonrefundable | Self-study route only |
| eCourseware (separate listing) | USD 250 | Optional study material; not a voucher |
| Annual continuing-education fee | USD 80 per year (USD 240 over three years) | After certification |
| CPE/ECE credits | 120 credits per three-year cycle | After certification (credits, not a fee) |
Official instructor-led or bundled training is priced separately by EC-Council and its training partners, so no single figure is quoted here. Check the current training page for live pricing.
The USD 450 Voucher: What You Are Actually Buying
The CSAv2 Exam Voucher - RPS is listed in the EC-Council Store at USD 450. "RPS" indicates remote proctoring, so you take the exam from your own location under supervision rather than traveling to a test center. The voucher is a permission slip to attempt exam 312-39, not a course, not a study aid, and not a guarantee of anything beyond a seat at the exam.
A few details shape how you should treat that USD 450:
- It is non-transferable. You cannot hand an unused voucher to a colleague or resell it. It is tied to you.
- It is valid for one year. The clock starts at purchase, so buying early "to lock in a price" only shrinks your preparation runway.
- It covers one exam format. The exam has 100 multiple-choice questions, a three-hour time limit and a 70% passing score. It is not a hands-on lab assessment, even though official training includes labs.
Two Routes to Eligibility, Two Different Price Tags
You cannot simply buy the voucher and sit the exam. EC-Council requires eligibility first, and the route you take changes your total. The certification portal's CSA-specific eligibility provisions govern here, and they take precedence over the blanket suggestion in the training-page FAQ that official training is mandatory. In practice, there are two paths.
Route 1: Official Training or Qualifying Courseware
If you complete official training or make a qualifying official-courseware purchase, you satisfy eligibility through that purchase. The eligibility page states that official-training fees include the USD 100 application charge, so you do not pay it a second time. Your remaining certification cost is the voucher. Your total is the training or courseware price plus USD 450.
Route 2: Self-Study With an Eligibility Application
The self-study route skips the official training purchase but adds paperwork and a fee:
- You need one year of verified network-administration or security experience.
- You pay the USD 100 nonrefundable eligibility application fee.
- An employer, supervisor or department verifier must confirm your experience.
- Once approved, you get a three-month window to purchase the voucher.
Self-study minimum spend, therefore, is USD 100 plus USD 450, or USD 550, before any study materials of your own choosing. Applicants who are minors face additional parental-consent and educational-institution documentation requirements under the portal's rules. For the full qualification walkthrough, read CSA Requirements 2026: Eligibility, Prerequisites & How to Qualify.
Key Takeaway
Do not pay the USD 100 application fee unless you are certain you are on the self-study route. If you are buying official training or qualifying courseware, that charge is already included. Paying it separately on top of training is a duplicated cost.
Training Bundles and eCourseware: Included Fees vs. Separate Fees
The most common pricing confusion around this credential comes from the number of similarly named products. Three things look alike on a storefront but do very different jobs:
| Product | What It Does | Does It Let You Sit the Exam? |
|---|---|---|
| CSAv2 Exam Voucher - RPS (USD 450) | Pays for the exam attempt with remote proctoring | Yes, once eligibility is satisfied |
| Eligibility application (USD 100) | Lets self-study candidates prove experience and qualify | It opens the voucher purchase window; it is not the exam |
| eCourseware (USD 250) | Self-paced study material | No. It is not an examination voucher |
The practical lesson is to read what each listing says it includes. A bundle that bundles training with a voucher is a convenience purchase; the separately listed USD 250 eCourseware is a learning resource only. If you buy eCourseware assuming it carries exam rights, you will still need the USD 450 voucher. Always confirm on the official EC-Council pages what a given purchase covers before checkout. Details on what the training itself contains are in CSA Training.
Cost Traps: Voucher Validity, Approval Windows and Retakes
Money is lost on this credential less through the headline price and more through timing mistakes. Two clocks are running, and they interact.
The Two Clocks to Watch
Each one can turn a sound budget into a wasted purchase.
- Three-month purchase window: After self-study eligibility approval, you have three months to buy the voucher. Apply for eligibility when your preparation is nearly done, not months ahead.
- One-year voucher validity: Once purchased, the non-transferable voucher expires in one year. An unused expired voucher is money spent on nothing.
The cleanest sequence for most self-study candidates is: prepare against the blueprint first, then submit the eligibility application, then buy the voucher shortly after approval, then schedule the exam while your preparation is fresh. Reversing that order front-loads fees and creates pressure to sit before you are ready.
On retakes, this article does not quote a retake fee or retake policy figure because none is established in the verified facts used here. Before you buy, check EC-Council's current retake terms on the certification portal so you can budget a possible second attempt honestly. A realistic budget treats a second voucher as a contingency, not an expectation. To gauge how likely you are to need one, see How Hard Is the CSA Exam? and CSA Pass Rate 2026: What the Data Shows, which discusses what can and cannot be said about success rates.
Keeping the Credential: Renewal and Continuing Education Costs
Passing is not the last charge. The CSA certification is maintained on a three-year cycle. To keep it active you must earn 120 CPE/ECE credits across that cycle, and EC-Council publishes a USD 80 annual continuing-education fee, which is USD 240 over three years.
Two points deserve emphasis because candidates routinely blur them:
- The fee and the credits are separate obligations. Paying the USD 80 each year does not satisfy the continuing-education requirement. You still have to earn and report the 120 credits.
- Credits can be cheap or free to earn. Activities that count toward CPE/ECE under EC-Council's policy, such as relevant professional work, learning and community contributions, often cost little. The cost driver is your time, not a mandatory course purchase. Review the official CPE policy for what qualifies.
So the true three-year cost of holding the credential, ignoring any optional training, is the exam voucher plus USD 240 in annual fees, plus the effort to earn 120 credits. Put differently: USD 450 gets you in; USD 240 over three years keeps you in.
Where Preparation Money Pays Off Most
Because the exam is 100 multiple-choice questions scored at 70%, the economics of preparation are about allocating study effort where the blueprint places the points. The eight weighted domains are official exam objectives, and two of them dominate.
| Domain | Weight |
|---|---|
| Security Operations and Management | 5% |
| Understanding Cyber Threats, IoCs, and Attack Methodology | 8% |
| Log Management | 15% |
| Incident Detection and Triage | 25% |
| Proactive Threat Detection | 12% |
| Incident Response | 25% |
| Forensics Investigation and Malware Analysis | 5% |
| SOC for Cloud Environments | 5% |
Incident Detection and Triage and Incident Response are jointly the largest domains at 25% each, which together represent half the blueprint. Add Log Management at 15% and you have 65% of the exam in three domains. Whatever you spend on practice material, the highest return comes from scenarios that exercise those areas. The full breakdown lives in CSA Exam Domains 2026: Complete Guide to All 8 Content Areas.
Incident Detection and Triage (25%)
Practice reading alerts the way a SOC analyst does, not memorizing definitions.
- Work through SIEM use cases and decide which alerts deserve escalation and which are noise.
- Practice correlating events across Windows, Linux, Mac, network and application logs.
- Understand how AI-generated detection rules fit into rule creation and tuning in the v2 scope.
Incident Response (25%)
Expect scenario reasoning about what to do, in what order, and why.
- Know playbook-driven response from containment through recovery.
- Be able to distinguish response actions from detection actions in a given scenario.
- Connect response decisions to forensics and malware analysis inputs.
One short note on scheduling, since this is the only place generic planning applies: put Log Management in your early weeks because everything in triage depends on reading logs fluently, then spend your heaviest blocks on triage and incident response, and leave the 5% domains (operations and management, forensics and malware analysis, cloud SOC) for lighter consolidation. The CSA Study Guide 2026 lays out that sequencing in more depth.
For realistic question-style practice, the CSA practice test site offers original scenario questions built around these domains rather than recycled exam content. Be wary of any resource claiming to supply "real exam questions"; original explanations are what build the skill the exam rewards.
Three Budget Scenarios
These examples use only the figures verified above. Optional training or extra practice purchases are shown as "plus" items because their prices vary.
Scenario A: Experienced Analyst, Self-Study
You already have a year of security or network-administration experience and a supervisor willing to verify it. You pay USD 100 for the eligibility application and USD 450 for the voucher: USD 550 total, plus whatever practice materials you choose. Annual fees of USD 80 begin after certification.
Scenario B: Employer-Sponsored Training Route
Your employer purchases official training, which includes the application charge. You then need the USD 450 voucher unless your employer's package already covers it. Confirm exactly what the bundle includes in writing, because the voucher is a separate line item unless explicitly bundled.
Scenario C: Career Changer Without Qualifying Experience
If you lack the one year of verified experience, self-study eligibility is not open to you, which makes the official training or qualifying courseware route the practical path. Your cost is the training or courseware price plus USD 450. Do not assume the USD 250 eCourseware alone gets you to the exam; verify on the eligibility page what qualifies.
Weighing the Spend Against the Outcome
Is roughly USD 550 to USD 700-plus, followed by USD 240 over three years, worth it? That depends on your goal. The credential is aimed at SOC analyst roles, and hiring managers for those positions often look at a combination of hands-on skills, tooling familiarity and certifications. This article does not assert a certification-specific salary premium, because the research supporting one has not been established. SOC analyst pay is an occupational question, distinct from whether holding CSA moves your number. For an honest treatment, read CSA Salary Guide 2026 and Is the CSA Certification Worth It?, and browse the kinds of roles that mention it in CSA Jobs.
If you are comparing against other entry-to-mid SOC credentials such as CySA+, compare total cost of ownership, not just the exam fee: voucher, eligibility fees, training, and the ongoing annual fee plus credit-earning effort. For exam dates and scheduling mechanics that affect when you pay, see CSA Exam Dates 2026.
Frequently Asked Questions
The official CSAv2 Exam Voucher - RPS, which uses remote proctoring, is USD 450. Self-study candidates also pay a USD 100 nonrefundable eligibility application fee. Candidates who qualify through official training have the application charge included in the training fee.
No. The separately listed USD 250 eCourseware purchase is study material, not an examination voucher. You still need the USD 450 voucher, and you must satisfy eligibility, to sit exam 312-39.
Not necessarily. The certification portal's CSA-specific eligibility provisions allow a self-study route for candidates with one year of verified network-administration or security experience, who pay the USD 100 application fee. Those provisions take precedence over the training page FAQ's general suggestion that training is required.
The published continuing-education fee is USD 80 per year, or USD 240 across the three-year cycle. You must also earn 120 CPE/ECE credits in that period. Paying the fee alone does not satisfy the credit requirement.
A purchased voucher is valid for one year and is non-transferable. For self-study candidates, approved eligibility gives a three-month window to purchase the voucher, so time your application close to when you are ready to test.
Costs and policies can change, so verify current figures on the official EC-Council pages before purchasing. When you are ready to test your readiness against the blueprint, the CSA practice exams are a low-risk way to find your weak domains before you commit to the USD 450 voucher.