Technology, Media & Healthcare

How to Underwrite a Managed IT Services (MSP) Company

Underwrite a managed IT services provider by isolating contracted monthly recurring revenue from project and hardware resale, then testing client retention, technician efficiency and cybersecurity exposure. Key metrics are recurring revenue share, gross margin on managed services, client concentration, revenue per technician or endpoint, and client churn. Recurring managed revenue supports higher leverage and valuation than project work.

What makes managed it services (msp) underwriting different

Managed service providers run IT infrastructure, help desk, security and cloud services for small and mid-sized businesses under monthly contracts, often priced per user or device. Value comes from contracted recurring revenue, sticky client relationships and opportunities to add security, cloud and compliance services. Risk comes from client churn when contracts expire, dependence on a few large clients, technician turnover, tool and licensing costs that rise faster than pricing, and liability if a client suffers a breach or ransomware attack through the MSP's systems. Many MSPs also resell hardware and software at low margins, which inflates revenue without adding much profit.

Lenders like MSP recurring revenue and commonly finance acquisitions with SBA or senior debt sized on EBITDA, provided client concentration is moderate and contracts renew reliably. They pay attention to cybersecurity insurance, contract liability limits and owner relationships with key clients. Equity investors and consolidators underwrite MSP platforms on recurring revenue growth, gross margin improvement through standardized tools, cross-selling security services and buying smaller MSPs at lower multiples. They value MSPs with high recurring revenue and standardized service stacks more than project-heavy shops.

Key metrics

Monthly recurring revenue share

Contracted managed services revenue renews predictably, while project and resale revenue must be won again.

Buyers commonly prefer MSPs where managed recurring revenue is a majority of gross profit.

Managed services gross margin

Shows pricing and efficiency after technician labor and tool costs.

Client churn

Lost clients reduce recurring revenue and are often linked to service quality or owner relationships.

Client concentration

A few large clients can represent a significant share of recurring revenue.

Lenders commonly scrutinize any client above roughly 10 percent of revenue.

Revenue per technician or per endpoint

Measures operational efficiency and scalability.

Contract term and renewal schedule

Shows how much recurring revenue is under contract and when it comes up for renewal.

How to underwrite it, step by step

Categorize revenue into managed services, projects, hardware and software resale, and reconcile to the PSA and billing systems.
Review client contracts for term, pricing, auto-renewal, termination rights and liability limits.
Analyze client retention, concentration and revenue changes over three years.
Calculate managed services gross margin by client, including tool and licensing costs.
Assess technician headcount, certifications, utilization and turnover.
Review the MSP's own security posture, tool stack, incident history and cyber insurance.
Evaluate the owner's role in client relationships and plan transition support.
Normalize EBITDA and size debt on recurring revenue profit, stressing client loss scenarios.

Due diligence checklist

Client list with MRR, contract terms and tenure
Managed services agreements and statements of work
PSA and RMM system reports
Revenue by category and gross margin by client
Vendor and distributor agreements for tools and licenses
Technician roster with certifications and compensation
Ticket volume and service level reports
Cybersecurity policies, audits and incident reports
Cyber liability and E&O insurance policies
Client churn history with reasons
Owner transition and retention plans

Key risks and mitigants

Client loss after ownership change

Use seller transition periods, earnouts and client introductions, and review assignment clauses.

Breach through the MSP's tools

Review security controls, require cyber insurance and contract liability limits, and include incident reporting covenants.

Technician turnover

Analyze compensation and retention, and confirm documentation and standardized processes.

Tool and licensing cost inflation

Review pricing escalators and vendor contracts, and stress gross margin for higher costs.

Revenue inflated by low margin resale

Value recurring managed services separately and size debt on gross profit rather than total revenue.

Typical financing and deal structure

Smaller MSPs are frequently acquired with SBA 7(a) loans, buyer equity and seller notes, with lenders focusing on recurring revenue and owner transition. Larger MSPs and roll-up platforms use senior term loans or unitranche facilities sized on EBITDA, often with delayed draw tranches for acquisitions and revolvers for working capital. Earnouts tied to recurring revenue retention are common because clients may leave after the owner exits. Representation and warranty insurance is increasingly used in larger deals, with attention to cybersecurity representations. Covenants typically include leverage and fixed charge coverage tests, and lenders may require cyber insurance with appropriate limits.

Red flags

Most revenue from projects and hardware resale rather than managed services
Several large clients on month-to-month terms
No cyber insurance or a recent security incident affecting clients
The owner is the primary technical contact for most clients
Declining gross margin as tool costs rise without price increases

Frequently asked questions

How are MSPs valued?

MSPs are typically valued on multiples of EBITDA or seller discretionary earnings, with higher multiples for businesses with strong recurring revenue, standardized service stacks, low client concentration and good growth. Project-heavy MSPs and those dependent on the owner usually sell for lower multiples. Buyers also review security practices and tool standardization, since they affect integration costs.

Can I use an SBA loan to buy an MSP?

Yes. SBA 7(a) loans are common for MSP acquisitions with stable cash flow. Lenders review recurring revenue, client contracts, concentration and the seller's transition plan. A seller note and equity injection are usually required, and earnouts may be used if client retention is uncertain. Lenders may also require cyber insurance and key person coverage on the seller.

What is MRR for an MSP?

MRR is monthly recurring revenue from managed services contracts, typically billed per user, device or site. It excludes project work and one-time hardware or software sales. Buyers and lenders focus on MRR because it is predictable and drives valuation and debt capacity. Recurring revenue under multi-year contracts with auto-renewal is typically valued above month-to-month arrangements.

Why does cybersecurity matter in MSP acquisitions?

MSPs have administrative access to many client networks, so a breach of the MSP can affect all clients at once. This creates liability and reputational risk. Buyers review security controls, incident history, contract liability limits and insurance before closing. Cyber insurance, contract liability caps and incident response plans are central to diligence, and lenders may require minimum coverage as a closing condition.

Underwrite a managed it services (msp) deal in minutes

Drop a deck or data room. Underridge returns a verdict, investment memo, term sheet and a live model, with every headline figure traced to a page, a formula or a labeled assumption. Ten underwrites free.

Try Underridge free

Educational content, not investment, credit, legal or tax advice. Benchmarks are common practitioner rules of thumb and vary by lender, market and cycle.