The Short Answer
In 2025, managed services companies are selling for 4× to 12× EBITDA, with the median transaction falling in the 6×–8× range. The specific multiple your business commands depends on six factors — and understanding those factors is the difference between a $10M exit and a $20M exit on the same underlying business.
This guide gives you the framework to calculate your own number, understand what is moving your multiple up or down, and identify the highest-ROI actions to take before going to market.
Step 1: Calculate Your Normalized EBITDA
Every MSP valuation starts with normalized EBITDA. This is not the number on your tax return. It is your earnings after adding back:
- Owner compensation above market rate. If you pay yourself $400K but a market-rate CEO would cost $180K, add back $220K.
- Non-recurring expenses. One-time legal fees, a facility move, a technology migration — these are added back because they will not recur.
- Personal expenses through the business. Vehicle, personal travel, personal meals — add these back.
- Depreciation and amortization. EBITDA adds these back by definition.
- Related-party rent adjustments. If you own the building and charge above-market rent, adjust to market.
Example calculation:
| Item | Amount |
|---|---|
| Reported net income | $800,000 |
| + Owner compensation add-back | $220,000 |
| + Non-recurring legal fees | $45,000 |
| + Personal expenses | $28,000 |
| + Depreciation & amortization | $65,000 |
| + Interest expense | $12,000 |
| **= Normalized EBITDA** | **$1,170,000** |
In this example, the reported net income of $800K understates the true earnings power by nearly 50%. This is why normalized EBITDA — not reported net income — is the correct starting point for valuation.
Step 2: Determine Your Multiple Range
Once you have your normalized EBITDA, the next question is: what multiple does your business deserve? Here is the 2025 market framework:
| Business Profile | Multiple Range | What Drives This Tier |
|---|---|---|
| Cybersecurity-focused MSP, 80%+ MRR, $3M+ EBITDA, multi-year contracts | 10× – 14× | Defensible security practice, high MRR, institutional buyer interest |
| Strong MSP, 70%+ MRR, low concentration, growing | 8× – 11× | High recurring revenue, clean financials, management depth |
| Solid MSP, 55–70% MRR, some concentration, stable | 6× – 9× | Good MRR base, some risk factors offset by stability |
| Mixed MSP/project, moderate concentration | 4× – 7× | Project revenue drag, concentration risk, founder dependency |
| Project-heavy, high concentration, founder-dependent | 3× – 5× | Significant risk factors, limited buyer universe |
Most MSPs with $1M–$5M in normalized EBITDA fall in the 5×–9× range. The businesses that consistently achieve 10× and above share a specific set of characteristics — all of which can be built intentionally with 12–18 months of preparation.
The Six Factors That Determine Your Multiple
Factor 1: MRR Percentage (Highest Impact)
Monthly Recurring Revenue percentage is the single most important driver of MSP valuation. Buyers are paying for predictable future cash flows — and MRR is the clearest signal of that predictability.
| MRR % of Total Revenue | Multiple Impact |
|---|---|
| 80%+ | +2× to +4× vs. baseline |
| 60–80% | +1× to +2× vs. baseline |
| 40–60% | Baseline |
| Below 40% | -1× to -2× vs. baseline |
If your MRR percentage is below 60%, the single highest-ROI action before going to market is converting project clients to managed services agreements. Even partial conversion — moving 10–15 percentage points of revenue from project to recurring — can add $1M–$3M to your exit value on a $1M EBITDA business.
Factor 2: Cybersecurity Practice
MSPs with mature cybersecurity practices command a 15%–30% premium over pure infrastructure MSPs. More importantly, they attract a different — and higher-paying — category of buyer: cybersecurity-focused PE platforms and strategic acquirers.
The minimum threshold that moves the needle is a documented MDR (Managed Detection and Response) offering, delivered either in-house or through a white-label vendor partnership. Full SOC capabilities, SIEM management, and vulnerability assessment programs push you further into premium territory.
Factor 3: Customer Concentration
Customer concentration is a direct multiple reducer. Here is how buyers think about it:
| Largest Customer as % of Revenue | Multiple Impact |
|---|---|
| Below 10% | No discount |
| 10–15% | Minor discount or earnout on that customer |
| 15–25% | Meaningful discount (0.5×–1.5× reduction) |
| Above 25% | Significant discount or deal-killer |
If you have a customer above 20% of revenue, your priority before going to market is growing your other relationships — not losing the large customer, but reducing their percentage through growth.
Factor 4: Contract Quality
Not all MRR is created equal. Buyers distinguish between:
- Multi-year contracts with auto-renewal: Highest value. Contractually protected revenue.
- Annual contracts with auto-renewal: High value. Predictable with low churn risk.
- Month-to-month agreements: Moderate value. Recurring but not contractually protected.
- Informal recurring relationships: Low value. Treated as project revenue by buyers.
Before going to market, audit your contract portfolio. Convert month-to-month relationships to annual or multi-year agreements where possible. Ensure all contracts have assignment clauses — without them, contracts cannot be transferred to a buyer without customer consent.
Factor 5: Management Team Depth
Founder dependency is the most common reason MSP deals are discounted. Buyers are acquiring a business, not a job. If the business cannot operate without you, they are buying a job — and they will price it accordingly.
The management depth that buyers want to see:
- A COO or Operations Director who manages day-to-day service delivery
- A Sales Director who owns client relationships and new business development
- Senior technicians who can handle escalations without founder involvement
- Documented processes that allow any qualified person to execute core functions
Building this layer takes 12–18 months. It is the most time-consuming improvement on this list, which is why starting early matters.
Factor 6: Revenue Scale and Growth Trajectory
Absolute revenue scale matters because it determines your buyer universe. Here is how scale affects who will buy you and what they will pay:
| Annual Revenue | Buyer Universe | Multiple Range |
|---|---|---|
| $500K–$2M revenue | Local/regional strategics, owner-operators | 3× – 6× EBITDA |
| $2M–$8M revenue | Regional PE platforms, mid-market strategics | 5× – 9× EBITDA |
| $8M–$20M revenue | National PE platforms, large strategics | 7× – 12× EBITDA |
| $20M+ revenue | Institutional PE, public company acquirers | 8× – 14× EBITDA |
Growth trajectory matters almost as much as current scale. An MSP growing at 20%+ annually will command a premium over a flat business at the same EBITDA level, because buyers are paying for future cash flows — and a growing business has more of them.
Putting It Together: A Sample Valuation
Let's apply this framework to a real-world example:
Business profile: MSP with $8M annual revenue, $1.4M normalized EBITDA, 72% MRR, basic cybersecurity offering (MDR through a vendor partner), no customer above 18% of revenue, annual contracts with auto-renewal, COO in place but founder still owns top 3 client relationships.
Multiple assessment:
- MRR at 72%: supports 7×–9× range
- Cybersecurity practice (basic): +0.5× premium
- Customer concentration (18% max): minor discount, -0.5×
- Contract quality (annual auto-renewal): no adjustment
- Management depth (COO present, founder dependency on top clients): -0.5× discount
- Revenue scale ($8M): supports upper-middle range
Estimated multiple: 7×–8.5×
Estimated valuation: $9.8M–$11.9M
Upside scenario: If the founder transfers top client relationships to the COO and Sales Director over the next 12 months, the management depth discount disappears. Estimated multiple moves to 8×–9.5×, valuation moves to $11.2M–$13.3M. That is a $1.4M–$1.4M improvement from a single change.
The Most Common Valuation Mistakes MSP Owners Make
Mistake 1: Using revenue instead of EBITDA as the basis. Some brokers quote revenue multiples ("your business is worth 1× revenue"). This is almost always wrong for MSPs. EBITDA multiples are the correct framework, and the difference can be enormous.
Mistake 2: Accepting the first offer. The first offer is almost never the best offer. A competitive process — where multiple qualified buyers are simultaneously evaluating your business — creates leverage and produces better outcomes.
Mistake 3: Going to market too early. Founders who go to market before fixing their key issues (concentration, founder dependency, contract quality) leave significant money on the table. The 12–18 months of preparation time is not overhead — it is value creation.
Mistake 4: Choosing the wrong advisor. A generalist business broker who does not understand MSP-specific metrics, the PE roll-up landscape, or how to run a competitive process will undervalue your business and miss the right buyers.
What to Do Next
If you want to know exactly where your MSP stands across all six valuation factors, take the free Exit Readiness Assessment. It scores your business in 12 minutes and gives you a personalized action plan.
If you are ready to talk through your specific situation, schedule a free consultation. No pitch, no pressure — just a straight conversation about your business and what it would take to maximize your outcome.
Frequently Asked Questions
What is the average EBITDA multiple for an MSP in 2025?
The median MSP transaction in 2025 falls in the 6×–8× EBITDA range. High-quality MSPs with 80%+ MRR, cybersecurity capabilities, and strong management teams are achieving 10×–14×. Lower-quality businesses with project revenue, customer concentration, or founder dependency trade at 3×–5×.
Is my MSP valued on revenue or EBITDA?
MSPs are primarily valued on EBITDA multiples, not revenue multiples. Revenue multiples are sometimes used as a quick reference, but the actual transaction price is almost always negotiated based on normalized EBITDA. A business with $5M revenue and $500K EBITDA is worth far less than a business with $5M revenue and $1.5M EBITDA.
Does my MSP need cybersecurity services to sell at a premium?
Not necessarily, but cybersecurity capabilities add a meaningful premium — typically 15%–30% above comparable MSPs without security services. More importantly, they open the door to cybersecurity-focused buyers who pay the highest multiples in the market. If you have 12+ months before going to market, building even a basic MDR offering is one of the highest-ROI investments you can make.
How does customer concentration affect my MSP valuation?
Customer concentration above 15% of revenue is a direct multiple reducer. A customer at 25% of revenue will typically result in a 0.5×–1.5× discount on your multiple, or an earnout tied to that customer's retention post-close. The fix is to grow your other customer relationships before going to market.
How long does it take to sell an MSP?
From the start of preparation to close, selling an MSP typically takes 12–18 months. The preparation phase (6–12 months) is where most of the value is created. The go-to-market and close phase takes an additional 4–6 months. Founders who try to compress this timeline typically leave significant money on the table.
Topics
Pete Martin
Founder & Lead Advisor, Vestara Advisors
Pete Martin is the founder of Vestara Advisors and has advised on dozens of sell-side M&A transactions for B2B tech and services founders. Before founding Vestara, Pete sold his own company to a KPMG portfolio firm at 12× EBITDA. He brings both sides of the table to every engagement.