Standard items
Multiple-choice with per-option explanations, why each answer choice is right or wrong, in the style of a good instructor rather than an answer key.
COMING SOON · iOS
Study for the current CySA+ exam.
The others are still on CS0-003. This one is built for CS0-004 — log analysis, IR playbooks, and AI in security operations. Hundreds of questions. Fully offline. Five dollars, once.
soc.stream — live
2026-07-09 08:14:22 INFO auth.login user=analyst_trainee status=success 2026-07-09 08:14:23 WARN edr.detect rule=T1059.003 host=WKSTN-042 2026-07-09 08:14:24 CRIT ids.alert sig=cobalt_strike_c2 action=blocked 2026-07-09 08:14:25 INFO case.open analyst=you status=learning
WHY CS0-004
Every other app is still teaching the old test.
CompTIA released CS0-004 V4 in June 2026. It reshuffles domain weights, drops the “managerial vs operational” control language, adds EPSS alongside CVSS, expands the tool families, and introduces an entire sub-objective on the analyst’s use of AI. Practice apps built for CS0-003 are studying you for last year’s exam.
This app was written against the CS0-004 objectives PDF sub-objective by sub-objective. Every question is tagged to the exact bullet it tests.
WHAT’S INSIDE
Hundreds of questions across four domains.
Performance-based
PBQs in four formats: log-line analysis, command triage, sequence ordering, and concept matching.
Real exam conditions
Practice mode for study, exam mode with the actual 165-minute deadline and 85-item cap.
COVERAGE
Weighted to the official blueprint.
-
Domain 1.0 — Security Operations 34%
Includes 1.6 AI in security operations — the sub-objective no CS0-003 app covers.
-
Domain 2.0 — Vulnerability Management 26%
CVSS + EPSS combined prioritization, BAS tools, cloud assessment (ScoutSuite, Prowler, Trivy, Checkov).
-
Domain 3.0 — Incident Response and Management 24%
Full IR lifecycle, playbook creation, evidence handling, RCA.
-
Domain 4.0 — Reporting and Communication 16%
Scan reports, risk scorecards, stakeholder comms, KPIs, escalation paths.
PRINCIPLES
Built the way a security tool should be.
- Five dollars, once.
- No subscription. No in-app purchases. No “unlock full question bank” wall halfway through.
- No accounts.
- No sign-in, no email, no password. The app never asks who you are.
- No analytics.
- Not the intrusive kind, not the “privacy-friendly” kind. Zero telemetry SDKs, zero pixels, zero third-party requests.
- Fully offline.
- After install, the app makes no network calls at runtime. Content ships in the binary; your progress lives on your device.
- No ads.
- Ever.
- Delete = gone.
- Uninstall the app and every trace of your study data goes with it. Nothing to export, nothing to leak.
FAQ
Questions before it’s out.
When does it launch?
App Store submission window opens shortly. This page will update with the direct link the moment it’s live.
Why only iOS?
Single-founder scope decision for v1. Android and iPad-optimized layouts are on the roadmap.
Does the question bank really have hundreds of questions?
Yes, ships-with-the-binary. Broken down roughly by the official domain weights, with performance-based items weighted toward the sub-objectives where competing material is thinnest: log analysis (1.3), IR process (3.2), IR techniques (3.3), and AI in security ops (1.6).
Does it replace a book or a course?
No. It’s a companion. Read the objectives PDF, work through a book or video series, then use this app to pressure-test and track weak spots.
How do you make money if there’s no subscription?
The $5 purchase is it. The app doesn’t need a server, doesn’t have ongoing infrastructure costs, and doesn’t need to sell attention or data to keep running.
What data does the app collect?
None that leaves your device. Your answers, timing, and scores live in a local SQLite database that only the app can read. See the privacy policy for the full statement.
Is CS0-003 supported?
No. CS0-003 is being retired, and by the time you’d schedule an exam, CS0-004 is the version to take. Building for one exam means writing better content for that exam.