Security services vertical
Security company acquisitions: alarm vs guarding.
Security company acquisitions cover three distinct business models: alarm monitoring and electronic security, physical guarding and patrol, and fire and life safety services. Each has a different margin profile, a different buyer universe, and a very different approach to origination. Treating them as a single category is the most common mistake buyers make when they first enter the sector, and it leads to either overpaying for the wrong asset or chasing targets that are already heavily intermediary-covered.
This post compares all three sub-sectors as acquisition targets and maps how to source each one off market.
Why are security company acquisitions attractive to private equity?
All three sub-sectors share one structural advantage: high customer retention driven by regulatory requirements, insurance mandates, and the practical difficulty of switching providers. That stickiness creates predictable revenue in a way that most services businesses cannot match.
The fragmentation dynamic adds to the appeal. According to CNBC, roughly half of all small-business owners are 55 or older, most without a formal succession plan. Security firms in the $2M-$15M revenue range are overwhelmingly founder-owned, and the sector has attracted sustained private equity interest because the consolidation runway remains long. Add-on acquisitions now represent roughly three-quarters of all PE buyouts according to Cherry Bekaert, and security services is a textbook add-on vertical: once a platform has a regional presence, adjacent firms become natural bolt-ons with immediate customer and operational overlap.
How do the three sub-sectors compare as acquisition targets?
The sub-sectors differ significantly in margin, valuation, PE coverage, and sourcing difficulty. The table below summarises the key dimensions.
| Sub-sector | Revenue model | Typical EBITDA margin | PE appetite | Sourcing difficulty |
|---|---|---|---|---|
| Alarm monitoring | Recurring monthly revenue (RMR) | 25-45% | Very high | High |
| Physical guarding | Labour-driven service contracts | 5-12% | Moderate | Low |
| Fire and life safety | Recurring inspection plus project | 15-28% | High | Moderate |
Alarm monitoring generates RMR from residential and commercial clients on multi-year contracts, with attrition rates typically running 8-12% annually. This predictability makes alarm businesses easy to finance and simple to value. The downside is that most meaningful independent platforms have already attracted sponsor attention. Off-market access to genuinely attractive alarm monitoring businesses is harder than in the other two sub-sectors.
Physical guarding companies are the opposite: labour-intensive, margin-thin, and operationally complex. Yet they are the most fragmented and the least banker-covered of the three. A $5M revenue guarding company in a secondary market may have never received a formal acquisition approach. For a platform with the operational infrastructure to improve margins through route density, scheduling software, and client retention, guarding roll-ups can generate strong returns on low entry multiples.
Fire and life safety sits in the middle. Inspection and service contracts produce recurring revenue at margins closer to alarm monitoring than to guarding. This sub-sector has seen significant PE activity in the past five years, but regional firms with $1M-$5M in inspection revenue still operate under the radar of the larger national consolidators. First-generation founders approaching retirement are common in this segment.
Which sub-sector is easiest to source off market?
Physical guarding is the most accessible for direct outreach. It is the most fragmented, the least intermediary-dependent, and populated by owner-operators who have rarely encountered a formal acquisition process. A targeted origination campaign in a defined regional geography can surface five to ten credible owner conversations within the first 60 days.
Alarm monitoring is the hardest. The most attractive independent accounts have already attracted sponsor coverage, and the remaining operators often have elevated price expectations based on anecdotal RMR multiples they have heard within the industry. Off-market access still exists, but it requires a longer outreach horizon and more sustained follow-up to identify owners who are genuinely open to a conversation before engaging a broker.
Fire and life safety is moderately accessible. Regional firms are reachable through direct outreach, and many operate outside the coverage radius of the larger platforms that have built national or multi-regional presence. See deal origination metrics for realistic benchmarks on how many owner conversations a targeted 90-day campaign should generate by sub-sector.
What does the security sector sourcing framework look like?
Sourcing security company acquisitions systematically requires a six-step process that treats origination as a continuous programme rather than a periodic search.
- 1. Choose your sub-sector before building a target list. The sourcing approach, qualification criteria, and conversation framing differ materially between alarm, guarding, and fire and life safety. Mixing them into a single undifferentiated list wastes outreach effort and produces confusing buyer positioning.
- 2. Map the market by geography and revenue range. Build a universe of all companies in your chosen sub-sector within your target geography. Prioritise the $2M-$15M revenue band where intermediary coverage is thinnest and owner-operators are making their own decisions.
- 3. Filter for independent ownership. Remove PE-backed platforms, publicly traded subsidiaries, and franchise operators. You want privately held businesses where the founder or a small family group still controls the exit decision.
- 4. Score by acquisition signals. For alarm monitoring, prioritise accounts with long average contract tenure and below-average reported attrition. For guarding, look for contract concentration below 30% in any single client and stable headcount over the past two years. For fire and life safety, prioritise firms where inspection contracts represent the majority of revenue rather than one-off project work.
- 5. Run personalised direct outreach. Reference the specific company and the owner's apparent tenure. The framing should open a conversation rather than push for an immediate decision. Outreach to business owners covers the messaging in detail.
- 6. Qualify the revenue and the owner in the first call. Confirm recurring contract revenue, customer concentration, and key-person dependency within the first 20 minutes. These three factors determine whether due diligence is worth opening. See acquisition target screening for a repeatable qualification framework.
What mistakes do acquirers make in security company acquisitions?
Most problems in this vertical are predictable and avoidable.
- Paying an RMR multiple on unverified accounts. Alarm monitoring businesses are often marketed on a multiple of recurring monthly revenue. Verify the contract terms, actual billing amounts, and trailing attrition rate before accepting the seller's figure. Stated RMR and billed RMR are frequently different.
- Ignoring customer concentration. A guarding firm with 60% of revenue from a single municipal contract has a very different risk profile from one with 50 diversified commercial accounts. Concentration above 20% in any single client should trigger a valuation adjustment or a retention mechanism in the deal structure.
- Missing key-person dependency. In all three sub-sectors, founder relationships with clients are often the primary retention mechanism. A transition plan for those relationships is as important as the acquisition price, particularly for guarding and fire and life safety firms where contracts renew annually.
- Skipping state licensing review. Security businesses operate under state licensing regimes that vary significantly. Alarm monitoring, guarding, and fire protection each carry their own licence requirements, and many licences are not automatically transferable on a change of ownership. Confirm licence validity and transferability before signing a letter of intent.
What does security sector origination look like in practice?
A healthcare investment bank we run origination for reached 14 owner conversations in three weeks and 133 within 90 days. Security company acquisitions follow the same pattern: volume and consistency over a 90-day horizon consistently outperforms ad hoc introductions. Most owners who are open to a sale will not respond to the first contact, and the buyers who generate the most deals are the ones who maintain a disciplined follow-up sequence across a defined target universe.
For PE-backed platforms building a security services roll-up, our solutions explains how we run targeted owner outreach campaigns across all three sub-sectors. For firms deciding whether to run this function internally or outsource it, outsourced deal origination vs in-house provides a framework for that decision.
Key Terms Glossary
Frequently asked questions
What is the typical EBITDA multiple for a security company acquisition?
Alarm monitoring platforms typically trade at 10-16x EBITDA or 30-50x monthly RMR for smaller accounts. Physical guarding businesses trade at 4-7x EBITDA. Fire and life safety firms fall in the 7-12x range depending on the proportion of recurring inspection revenue versus project work.
How do I find security companies for sale off market?
Build a geographic target list of founder-owned businesses in your chosen sub-sector, score by revenue range and acquisition signals, then run personalised direct outreach. Most security firms below $10M in revenue have never been formally approached by a buyer. The majority of off-market deals in this vertical are initiated through direct buyer outreach rather than broker listings.
Is alarm monitoring or physical guarding a better acquisition target?
It depends on your operational capability and return expectations. Alarm monitoring generates higher margins and more predictable cash flow but trades at higher multiples and is actively covered by many PE sponsors. Physical guarding trades cheaper and is far more accessible off market, but requires tighter post-close management to improve labour utilisation and retain contracts.
How do PE firms value fire and life safety businesses?
Fire and life safety businesses are valued on a multiple of EBITDA, with the mix between recurring inspection revenue and project revenue influencing the multiple. A business generating 70% or more of revenue from recurring inspection contracts commands a significant premium over one that is predominantly project-driven.
What regulatory issues should I check before signing an LOI?
State licensing is the primary concern. Each state regulates alarm, guarding, and fire protection separately, and licence transferability on a change of ownership varies. Confirm that the target holds valid licences in every state where it operates and that those licences can transfer to a new owner without reapplication or a gap in operations.
How long does it take to close a security company acquisition off market?
First conversation to signed letter of intent typically runs four to twelve weeks for well-engaged sellers. The sourcing campaign that generates those conversations should run for at least 90 days before drawing conclusions about market conditions or owner motivation.
Should I use a broker to find security company acquisition targets?
Brokers are active in the alarm monitoring segment and less common in guarding and fire protection. For off-market access to the most fragmented parts of the market, direct outreach consistently surfaces better opportunities at lower entry multiples than monitoring broker listings. See outsourced deal origination vs in-house for a framework on structuring that function.
How important is customer concentration in a guarding company acquisition?
Very important. A guarding firm heavily dependent on a single municipal or commercial contract is exposed to non-renewal risk that can erase a significant portion of its revenue in a single contract cycle. Most institutional buyers apply a valuation discount or a revenue escrow mechanism for contracts representing more than 20% of total revenue.