TryHackMe Security Analyst Level 1 (SAL1)

Assessment

80 multiple-choice questions (1 hour) followed by two SOC simulator scenarios (2 hours each).

Exam length

6 hours of timed sections inside a 24-hour window

Questions

80 multiple-choice + 2 simulator scenarios

Passing

Not captured in this check

Price

Conflicting — The official page showed two different prices on the check date: "$209" in the exam details panel and "For £299, you get the exam and free retake" in the FAQ. It also gave both 25% and 15% as the subscriber discount.

Included

Exam plus one free retake. A purchase is valid for 12 months.

Retakes

One free retake, available three days after starting the first attempt.

Validity

Not captured in this check

Renewal

Not captured in this check

Prerequisites

None.

Who it suits

Editorial judgment
TryHackMe learners who want a credential that tests alert triage in a simulated SOC, not only knowledge.

Official page ↗

Related guides

• Practical SOC certifications compared: BTL1, CCDL1, HTB CDSA and TryHackMe SAL1

Compare with

• CompTIA Security+
• Blue Team Level 1 (BTL1)
• CyberDefenders Certified CyberDefender Level 1 (CCDL1)
• EC-Council Certified SOC Analyst (C|SA)

All certifications in one table · Build a training plan

Sources

1. TryHackMe: tryhackme.com/certification/security-analyst-level-1 — checked 2026-10-22, direct HTTP fetch and rendered in a headless browser