The PE Playbook for MSPs: Why Private Equity Loves Managed IT Services

Managed service providers are arguably the purest expression of the PE roll-up thesis in the lower middle market. Contractual monthly recurring revenue, client retention rates that most industries would kill for, a fragmented universe of tens of thousands of small operators, and a founder generation that started their companies when Windows NT was new. If you're underwriting recurring revenue services, MSPs are already on your shortlist or should be.

This playbook breaks down why the sector attracts so much capital, what the deals actually look like, how the MRR multiple ladder works, and how firms are building MSP platforms today.

Why PE loves MSPs

There are roughly 40,000 MSPs in the United States, and the overwhelming majority do under $5M in revenue. No single provider holds meaningful national share. The market itself continues to expand as SMBs outsource IT functions they can no longer staff internally. That combination of fragmentation and secular growth is the starting point, but the real attraction is the quality of the revenue.

Contractual MRR is the closest thing to SaaS in services

The core product of a mature MSP is the managed services agreement: a monthly contract covering monitoring, patching, help desk, backup, and security for a fixed fee per seat or per device. A well-run MSP with 120 clients averaging $3,000-$8,000 per month in managed services billing has a revenue base that renews automatically, invoices predictably, and grows as clients add employees. Buyers can underwrite this revenue the way they would underwrite software. That is rare in the services world, and it is why MSPs support leverage and command multiples that break-fix IT shops never will.

Switching costs keep clients in place

Changing IT providers is painful for the end customer. The incumbent MSP holds the admin credentials, manages the Microsoft 365 tenant, runs the backups, and knows where every undocumented workaround lives. Migrating all of that to a new provider carries real risk of downtime and data loss, which is why well-run MSPs routinely retain 90-95% of clients year over year. Churn in this sector is usually a symptom of a service failure, not a competitive loss. For a buyer, that stickiness translates directly into cash flow durability.

Cybersecurity is a structural tailwind

Ransomware, cyber insurance requirements, and compliance frameworks like HIPAA, CMMC, and SOC 2 have turned security from an upsell into a mandate. SMBs cannot hire their own security teams, so the spend flows to their MSP. Security-driven services (endpoint detection and response, managed SIEM, security awareness training, compliance-as-a-service) typically carry higher margins than commodity monitoring and give MSPs a natural path to growing revenue per seat within the existing client base. Every renewal cycle is an opportunity to attach more security services, and insurance carriers are effectively doing the selling by requiring controls that only a managed provider can implement for a 40-person company.

SMB IT outsourcing keeps growing

The economics of internal IT stopped working for small businesses years ago. A single competent systems administrator costs $80K-$110K fully loaded and cannot cover a 24/7 monitoring window, a security stack, and a help desk simultaneously. An MSP delivers all of that for less than the cost of one hire. As technology complexity increases (cloud migration, identity management, AI tooling, compliance), the case for outsourcing gets stronger every year. This is a market where the total addressable spend grows even in flat economies, because IT is no longer discretionary for any business that touches customer data.

Asset-light with real operating leverage

MSPs carry almost no capital equipment. The assets are contracts, people, and a tooling stack. Adding a new client to an existing engineering team is largely incremental margin once the platform is staffed, which is why the roll-up math works so well: centralize the network operations center and help desk, and every acquired book of MRR drops through at higher margin than it earned standalone.

Typical deal characteristics

MSP deals in the lower middle market follow recognizable patterns. Knowing the ranges lets you calibrate quickly and avoid overpaying for revenue that looks recurring but isn't.

Revenue and EBITDA

• Platform targets: $8M-$40M revenue, $1.5M-$8M EBITDA. Established MRR base above 60% of revenue, a real service delivery team with tiered escalation, documented processes in a PSA, and at least one layer of management below the founder.
• Add-on targets: $1M-$8M revenue, $200K-$1.5M EBITDA. Often founder-operated with the owner still touching escalations, but carrying a loyal client book and a technician team that can be folded into a platform's service desk.

Valuation multiples and the MRR ladder

MSP valuation is driven by one variable above all others: the percentage of revenue that is contractual MRR. The market has effectively built a multiple ladder around it. A predominantly break-fix or project-based IT shop, even a profitable one, typically trades at 3-4x EBITDA because the revenue has to be re-earned every month. Shops with 40-60% MRR trade at roughly 5-7x. Companies above 70% MRR with strong retention and clean contracts command 8-10x, and platform-scale MSPs with $3M+ EBITDA, 75%+ MRR, and security-weighted service mixes have traded into the low double digits in competitive processes. Smaller deals are often priced on revenue instead: quality MRR books frequently transact at 1.0-1.5x recurring revenue, while project and hardware revenue gets valued at a fraction of that.

The arbitrage is the whole game. Buy a $3M revenue add-on with a solid MRR book at 4-5x EBITDA, migrate its clients onto the platform's stack and service desk, and that same EBITDA is valued at 9-10x inside the platform at exit. Multiple expansion plus margin capture from consolidation is how MSP roll-ups have consistently generated returns even without heroic organic growth assumptions.

What drives MSP valuation

Two MSPs with identical revenue and EBITDA can be worth wildly different amounts. These are the factors sophisticated buyers weigh when deciding whether a target is a 5x business or a 9x business.

• MRR percentage and contract quality: The headline metric, but the details matter. Month-to-month arrangements dressed up as "recurring" are worth less than 3-year agreements with auto-renewal clauses and annual price escalators. Buyers read the actual contracts, not the QuickBooks classes.
• Net revenue retention: The best MSPs show 100-110% net revenue retention, meaning the existing client base grows through seat additions and service attach even before new logos. NRR below 95% signals either client shrinkage or an owner who has never raised prices.
• Customer concentration: No client above 10-15% of MRR. Small MSPs frequently carry one anchor account at 25-40% of revenue, often the founder's first big client. That concentration takes turns off the multiple or gets structured around with an earnout.
• Revenue per seat and per client: Healthy per-user managed services pricing typically runs $100-$180 per seat per month for a full stack, more with security bundled. An MSP averaging $60 per seat is underpricing, which is either a problem or an opportunity depending on how you underwrite the repricing risk.
• Tooling stack maturity: A standardized RMM and PSA deployment (ConnectWise, Kaseya, Datto, HaloPSA, NinjaOne) with real data hygiene signals operational maturity. An MSP running three different RMM tools inherited from past decisions, with tickets tracked in shared inboxes, will cost real integration money post-close.
• Service desk independence from the founder: If the owner is still the senior escalation engineer and the primary client relationship holder, you are buying a job, not a business. Buyers pay premiums for MSPs where service delivery runs without the founder for weeks at a time.
• Client profile and stack standardization: Fifty clients on a standardized Microsoft 365 and Azure stack are far cheaper to serve than fifty clients on fifty bespoke environments. Standardization percentage is a direct input to gross margin and integration cost.

Deal structures

Most MSP transactions combine cash at close with an earnout or holdback tied to MRR retention over the first 12-24 months, precisely because client relationships are the asset being purchased. Sellers commonly roll 10-30% equity into the platform, which aligns incentives through the transition and gives founders a second bite at exit. Seller notes and SBA financing appear frequently in sub-$5M deals. For platforms, lenders are comfortable underwriting MSP MRR and will typically support 3-4x senior leverage on a quality book.

Key acquisition criteria

Not every MSP is worth pursuing. The targets that clear diligence and integrate cleanly share a consistent set of traits.

• 70%+ recurring revenue: Managed services agreements, not a pile of block-hour prepaid arrangements or hardware resale. Recurring means contracted, invoiced monthly, and renewing without a sales cycle.
• Multi-year contracts with auto-renewal: The contract base should have staggered renewal dates, auto-renewal language, and termination clauses that require notice. A book of handshake agreements is a book of options, not contracts.
• 500+ seats under management: Enough scale that the client base is diversified and the service desk has real process. Below that, you're acquiring a technician with customers.
• Documented environments: Clean documentation in an IT documentation platform (commonly IT Glue or Hudu) means the client environments can actually be transitioned to a platform service desk. Undocumented tribal knowledge is a retention risk that walks out with any departing engineer.
• Security services already attached: An MSP that has already moved clients onto EDR, MFA, and managed backup has proven it can sell security. One that hasn't leaves an obvious value creation lever, but also raises the question of why the clients never bought.
• Clean financials with honest revenue classification: Many MSP owners blend project, hardware, and managed revenue in reporting. You need financials clean enough to see true MRR, gross margin by service line, and normalized owner compensation before you can price the business.

Platform vs. add-on strategy

The MSP roll-up playbook is one of the most refined in private equity at this point. Acquire a platform with real service delivery infrastructure, then compound it with add-ons that bring MRR books, technicians, and geographic or vertical reach.

The platform

The platform needs to be a business, not a big technician. That means a tiered service desk (help desk, escalation engineers, field techs), a network operations function, standardized RMM and PSA tooling with clean data, documented onboarding and offboarding processes, and a management layer that can absorb acquired teams. Ideal platforms run $10M+ revenue with 65%+ MRR, hold client relationships at the account management level rather than the founder level, and have already survived at least one tooling consolidation. The platform's stack becomes the standard every add-on migrates onto, so its operational maturity caps how fast you can integrate.

Add-on playbook

Add-ons are acquired for their MRR book, their engineers, and their market position, in that order. The integration sequence is well understood: retain the clients through a carefully managed communication plan, migrate them onto the platform's RMM, PSA, and security stack over 6-12 months, consolidate the service desk, and reprice underpriced agreements at renewal. Each of those steps captures margin. A standalone $3M MSP running 12-15% EBITDA margins often produces 20-25% margins on the same revenue once it's running on platform infrastructure. Disciplined platforms absorb 2-4 add-ons per year; the constraint is integration capacity, not deal flow.

The repricing lever

The most reliable value creation lever in MSP add-ons is repricing. Founder-led MSPs systematically underprice because the founder has personal relationships with clients and hasn't raised rates in years. It is common to acquire a book averaging $85 per seat when the platform's standard stack prices at $130-$150. Executed carefully at renewal, with a genuinely improved service and security offering to justify it, repricing alone can add 20-30% to an add-on's revenue with minimal churn. Executed carelessly, it torches the retention the whole deal was priced on. The platforms that do this well pair every price increase with a visible service upgrade.

Owner demographics and succession

The MSP founder generation is aging into exit territory on a predictable schedule. Most established MSPs were started in the late 1990s and 2000s by technical founders: network engineers, systems administrators, and value-added resellers who rode the shift from break-fix to managed services. Those founders are now in their 50s and 60s, and they built businesses that are deeply dependent on them personally.

The succession picture is consistent across the sector. The founder is the senior technical escalation point and often the only real salesperson. There is no internal successor, because the best engineers want to engineer, not run a company. The founder's kids have watched 25 years of 2 a.m. server migrations and want nothing to do with it. And the founder has most of their net worth locked in an illiquid business whose value they can only guess at, in a market where they keep hearing about competitors selling to PE-backed platforms.

There's an added forcing function in this sector that most trades don't face: the technology treadmill. Staying competitive now requires a security operations capability, cloud expertise, and tooling investment that a $2M MSP struggles to fund. Founders who could coast on Windows Server expertise for two decades are looking at the next five years of investment and concluding they would rather sell into a platform than fund it themselves. That makes them unusually receptive to a credible, respectful approach, especially one that offers their team a home and their clients continuity.

How to source MSP deals

The defining fact of MSP sourcing is that the best targets never hit the marketplaces. Listing sites and business brokers see the weakest books: high break-fix mix, shrinking MRR, owner burnout. The 70%+ MRR shops with loyal clients are profitable, comfortable, and not for sale until someone starts the conversation. Direct-to-owner outreach built around your thesis is how the winning platforms are sourcing, because the alternative is bidding against six other sponsors in a banked process for the same asset.

Build targeted lists

Start with IT services companies in your target geographies and filter hard. Employee count (10-75), years in business (10+), and evidence of a managed services model: "managed IT," "MSP," or per-seat pricing language on the website, RMM and security vendor partner badges, Microsoft partner status. Commercial data providers get you the universe; the qualification work is separating true MSPs from staffing firms, software resellers, and one-man consultancies that share the same NAICS codes. List quality determines everything downstream.

Peer groups and channel communities

The MSP industry is unusually communal, and that structure is a sourcing map. Thousands of MSP owners belong to peer groups and communities: ConnectWise Evolve peer groups, IT Nation, the Robin Robins ecosystem, ASCII Group, CompTIA communities, and a long tail of regional user groups. Members of these communities tend to be the better operators, because they benchmark their financials against peers, adopt best practices, and actually know their MRR percentage. Membership itself is a quality signal. Vendor conference exhibitor and attendee lists, peer group directories, and community award programs (the various "fastest growing MSP" lists) are all high-signal inputs for target identification.

Vendor channel programs as a signal layer

Every serious MSP sits inside vendor channel programs, and tier status is public marketing. A Microsoft Solutions Partner designation, a Datto or Kaseya partner tier, a SentinelOne or Sophos MSP badge: each one tells you something about the company's scale, stack, and sophistication before you ever make contact. Distributors and vendor channel account managers also know exactly which partners in a territory are growing, which are stagnating, and which owners are making retirement noises. Building relationships with the channel is slower than list-based outreach but produces intelligence you cannot buy.

Craft industry-specific messaging

MSP owners are technical, skeptical, and inundated with generic acquisition outreach, because every sponsor in the lower middle market has discovered the sector. Messaging that works speaks their language: MRR mix, stack consolidation, the security investment treadmill, technician retention, what happens to their engineers post-close. An owner who spent 20 years building a help desk wants to know whether you're going to gut it. Address that directly and you sound like a buyer worth talking to. Lead with "we acquire founder-led MSPs" and a spreadsheet request, and you get filed with the other twelve emails that week.

Consistency over campaigns

MSP founders sell on their timeline, not yours. The trigger is usually an event: a key engineer resigns, a big client gets ransomed, a cyber insurance renewal doubles, a peer group friend exits. You cannot predict the event, so the only strategy is to be present when it happens. That means sustained multi-channel outreach (email, phone, occasionally direct mail) over quarters, not a six-week blast. The firms winning proprietary MSP deals are the ones an owner already recognizes when the moment arrives.

Key financial metrics buyers look for in MSPs

MSP diligence has matured into a fairly standard metrics stack. These are the numbers that determine whether a target prices at the top or bottom of the range.

MRR percentage and composition

The first cut is simple: what portion of trailing revenue is contractual monthly recurring? Above 70% is platform-grade. 50-70% is a solid add-on with repricing and conversion upside. Below 40% is a project shop with a managed services side hustle, priced accordingly. But composition matters as much as percentage. Buyers decompose MRR into managed services, security services, backup and continuity, and resold licenses (Microsoft 365, productivity software). Resold licensing is low-margin pass-through that inflates MRR optically; a $500K MRR book that is 40% license resale is materially weaker than the same number at 10%. Look at MRR growth over the trailing 24 months, and separate growth from new logos versus expansion within existing clients.

Net revenue retention and churn

Logo retention above 90% annually is the baseline for a healthy MSP; the best books run 95%+. Net revenue retention above 100% means the installed base grows on its own through seat additions, price escalators, and security attach. Buyers scrutinize the churn that did happen: losing clients to bankruptcy and acquisition is life, losing them to competitors is a service problem. They also check contract terms behind the retention numbers, because 95% retention on month-to-month arrangements is loyalty, while 95% retention on 3-year auto-renewing agreements is structure. Structure is worth more.

Gross margin by service line

Well-run MSPs generate 55-70% gross margins on managed services, 30-45% on project work, and 15-25% on hardware and license resale. Blended gross margin below 45% usually means underpricing, an inefficient service desk, or too much low-margin resale in the mix. At the EBITDA line, founder-led MSPs typically run 10-18% margins, while platform-scale operators with consolidated service desks reach 20-28%. That spread is the integration prize. As with any founder-led business, normalize owner compensation carefully; MSP founders often pay themselves as senior engineers plus distributions, and the true market cost of replacing their technical role is real.

Seats, endpoints, and productivity benchmarks

Per-unit economics reveal operational quality fast. Managed seat pricing for a full stack typically runs $100-$180 per user per month, with security-heavy stacks pushing higher. Revenue per technician is the standard productivity benchmark: quality MSPs generate roughly $175K-$250K in revenue per technical employee, and numbers well below that range signal utilization or pricing problems. Endpoints per technician (often 250-400 for a well-automated shop) shows how much leverage the tooling actually provides. Buyers also look at ticket volume per endpoint trending down over time, which indicates proactive management rather than firefighting, and at the ratio of clients to account managers, which predicts whether relationships survive the transition.

MSP add-on acquisition strategy

The add-on acquisitions playbook is where MSP platforms create most of their value. Three vectors dominate.

Geographic density for on-site response

MSP delivery is more remote than it used to be, but on-site response still matters: server room issues, network hardware, new office buildouts, and the simple reassurance of a technician clients have met. Clients in a metro want a provider with local presence, and a platform with engineers in-market wins deals a remote-only competitor loses. Acquiring MSPs in adjacent metros builds a regional footprint where field techs can be shared, on-site SLAs can be honored profitably, and local brand reputation compounds. Density also concentrates your sourcing and marketing spend: three add-ons in one region produce referral flywheel effects that three scattered acquisitions never will.

Cybersecurity and MSSP capability bolt-ons

The fastest-growing service line in the sector is security, and most sub-$5M MSPs cannot build a genuine security operations capability themselves. Acquiring a small MSSP, or an MSP with a mature security practice (24/7 SOC monitoring, managed detection and response, compliance advisory), gives the platform a capability it can immediately cross-sell across the entire client base. The attach math is compelling: adding $30-$60 per seat per month of security services across thousands of existing seats is high-margin revenue with near-zero acquisition cost. Security capability also hardens the platform's competitive position, because SMBs increasingly choose providers based on security credentials, and it supports the premium pricing that makes repricing conversations land.

Vertical specialization

Verticalized MSPs punch above their weight. A shop that specializes in healthcare IT (HIPAA compliance, EHR support), legal IT (document management, litigation support systems), or financial services (FINRA and SEC compliance, trading floor uptime) commands better pricing, retains clients longer, and sells through referrals inside tight professional communities. Acquiring a vertical specialist gives a platform a defensible niche, compliance expertise that generalist competitors can't fake, and a sales motion that scales through the vertical's own networks: the practice managers, office administrators, and compliance officers who all talk to each other. Several of the strongest MSP platforms are built entirely on vertical theses rather than geographic ones.

The bottom line

MSPs offer the cleanest recurring revenue thesis in lower middle market services: contractual MRR, structural retention, security tailwinds, and a founder generation heading toward exit without succession plans. The economics are proven and the playbook is public, which means the constraint is no longer the thesis. It's access. The best MSPs never list, the banked processes are crowded, and the owners worth talking to are getting a dozen generic emails a week. The firms building real MSP pipelines are the ones reaching owners directly, credibly, and consistently before the rest of the market does. If that's the pipeline you're building, see how our PE deal origination program helps firms source off-market MSP targets systematically.