Selling a Physical Security Services business

In physical security, buyers want to know the schedule holds, the phones get answered, and the licenses stay valid after close. A clean P&L helps, but the deal often turns on what happens on a bad Tuesday: a no-show guard, a down door at 5 a.m., or a site that suddenly needs new badges.

What's your physical security services business worth?

Sign up to learn more about selling your business. Free valuation included.

What buyers evaluate, and how to prepare

Can you show clean financials that explain where profit actually comes from: labor, hardware, or service plans?
Deal-critical
Financial Readiness

What buyers determine

Buyers are checking whether earnings come from repeatable service and labor, or from hardware pass-through and timing noise. They want numbers that match how security work bills and collects, including open jobs, billing milestones, and AR reality. If gross margin drivers are unclear, buyers usually protect themselves with a lower price, escrow, or holdback.

How to prepare

  • Split revenue and gross profit into labor, hardware/materials, and recurring/service plans. Tie it to tax returns and financials.
  • Build an add-backs schedule with receipts and statements for each item.
  • Prepare lender-style reports: 3 years of P&L/BS, trailing 12 months, AR/AP aging, and a working-capital snapshot.
  • Load a secure data room with financials plus job pipeline, contracts, claims, and payroll/timekeeping reports.
Great answer
We report margin by labor, hardware, and recurring agreements. Over the last 12 months, we did $4 million revenue and $700,000 SDE/EBITDA; hardware is 30% of revenue but only about 15% of gross profit, and labor plus service drive the rest. AR aging and WIP (Work in Progress) are current, and we can show the billing gates that affect collections. The data room includes reconciled statements and a documented add-backs schedule.
Good answer
We can share financial statements and explain that labor and service drive profit, but we have not fully split margins by line or finalized add-backs support.
Red flag
Revenue is revenue. We do not separate hardware and labor, and the books do not match the pipeline.
How Rejigg helps:Rejigg’s data room and QuickBooks integration help you present lender-ready financials alongside AR, contracts, and pipeline proof buyers underwrite against.
Which licenses or registrations are tied to specific people, and what’s the plan if they leave?
Deal-critical
Licenses & Compliance

What buyers determine

Buyers are confirming the company can legally staff posts, pull permits, and enter restricted sites on day one after closing. They also look for delays tied to renewals, background checks, fingerprinting, qualifying-agent rules, and site-specific clearances. A written continuity plan lowers the risk of a forced pause in operations or an escrow requirement.

How to prepare

  • List every company and individual license/registration with jurisdiction and renewal date.
  • Write the transfer and notice steps, separated into pre-close and post-close actions.
  • Identify who holds each critical credential and document retention and backup coverage.
  • Upload license copies, renewal receipts, and compliance SOPs to the data room.
Great answer
We have a license matrix by state and service line that shows what is company-held and what is tied to individuals, plus renewals and transfer steps. Our qualifying role is held by John Smith, and they are under a stay agreement through transition. We also have a backup path if they exit. For regulated sites, we can show our badging and vetting workflow so access does not get interrupted after close.
Good answer
We know which licenses we have and who holds them, but we still need to map transfer timing and document a backup plan.
Red flag
Licensing varies by state. We will sort it out later, and the qualifier is critical but not planned for.
How Rejigg helps:Rejigg keeps license, insurance, and site-access records organized in a permissioned data room so buyers can verify continuity without messy email threads.
Can you cover nights, weekends, and “the door must work by 7 a.m.” calls? Who actually fills tomorrow’s shifts?
Deal-critical
Coverage Continuity

What buyers determine

Buyers want proof that staffing and emergency response work without the owner doing heroics. They look for real scheduling and dispatch controls: rotation, escalation, backfill capacity, and supervisor checks. If posts go uncovered or urgent outages sit, customers often switch providers fast.

How to prepare

  • Document on-call rules, escalation paths, and response targets by customer type.
  • Provide fill-rate, call-out/no-show handling, and supervisor/site-check examples.
  • Name the scheduling and dispatch owners. Cross-train a backup who can run it.
  • Share one real urgent-call timeline from intake to invoice with timestamps.
Great answer
We run a documented on-call rotation with escalation, and after-hours calls are priced and tracked. Our fill rate over the last 12 months is 95%, and we can show how we backfill across accounts when call-outs happen. Dispatch is owned by John Smith, our Operations Manager, with a trained backup, not me. Here is a recent 5 a.m. “door down” event with timestamps, resolution notes, and invoicing.
Good answer
We cover after-hours and usually handle call-outs, but the process still depends on a couple of key people and is not fully documented.
Red flag
We figure it out when it happens. There is no rotation, and backfills are last minute.
How Rejigg helps:Rejigg helps you share schedules, SOPs, and real response examples early so serious buyers can underwrite continuity without discounting for uncertainty.
What kind of contracts do you really have, and can they be assigned?
Deal-critical
Contracts Transferability

What buyers determine

Buyers are validating that revenue can transfer and that key customers will not be able to terminate or rebid immediately. They focus on change-of-control and assignment clauses, named-person requirements, special insurance, prime-contractor dependencies, and strict site rules. A clear list of consent-required accounts helps protect price and reduces last-minute deal surprises.

How to prepare

  • Build a contract register with term, termination, assignment/change-of-control language, and decision-maker contacts.
  • Flag high-risk agreements: government, healthcare, education, property manager portfolios, prime subs, restricted sites.
  • Plan client notice and consent timing around licensing and the closing date.
  • Upload executed agreements, amendments, and insurance requirements to the data room.
Great answer
We reviewed the signed agreements and flagged which accounts need written consent versus simple notice. The top 10 accounts that matter for consent are in government facilities, healthcare institutions, and financial services, and we have the decision-makers and typical approval timelines documented. For prime-contractor work, we documented the dependency and performance history. Account stability does not hinge on my personal relationship alone.
Good answer
We have the contracts and know most key terms, but we have not fully categorized assignment and change-of-control requirements.
Red flag
Our contracts are standard, and clients will be fine. We do not track assignment language.
How Rejigg helps:Rejigg keeps contracts organized and permissioned so buyers can review assignability without you broadcasting sensitive customer terms.
Can you show job-level results, not just company-wide margins? How often do fixed-price installs blow up, and why?
Deal-critical
Job Profitability

What buyers determine

Buyers want to see that installs are scoped correctly and labor is controlled, especially on retrofits, where surprises can crush margin. They look for early detection of overruns, disciplined change orders, and consistent project closeout. Without job-level proof, most buyers assume the blended margin is fragile.

How to prepare

  • Pull 6–10 completed jobs with estimate vs. actual hours, change orders billed, and closeout notes.
  • Document the quoting workflow: site walk, scope template, labor-hour guardrails, approvals.
  • Summarize fixed-price overruns from the last 12 months with causes and what changed.
  • Standardize change-order language and billing triggers.
Great answer
We can review a set of recent jobs end to end, including a clean install, a difficult retrofit, and a service-heavy customer. Each file shows estimated versus actual labor hours, change orders billed, and what we absorbed and why. We track fixed-price overruns, and the main drivers have been equipment delays, unexpected site conditions, and client-requested changes. We updated our scoping and approval steps to reduce repeats.
Good answer
We know which jobs run long and can share examples, but estimate-versus-actual tracking is not consistent on every job.
Red flag
Margins average out across projects. We do not track hours tightly, and change orders are hard to get approved.
How Rejigg helps:Rejigg helps you organize job files, closeouts, and change orders so buyers see control at the job level instead of guessing from blended margins.
How do you capture hours, approve exceptions, and prevent buddy punching? How do you control overtime?
Deal-critical
Payroll & Timekeeping

What buyers determine

In guarding and patrol models, payroll control largely determines profit. Buyers look for wage and hour exposure, break and training time compliance, travel time handling, and whether time edits are controlled. Strong timekeeping reduces legal risk and makes cash flow easier to finance. Weak controls often lead to escrows, special indemnities, and slower diligence.

How to prepare

  • Document time capture, approvals, exception handling, and audit cadence with supervisor verification.
  • Break out overtime drivers by account and show how contracts handle overtime cost.
  • Compile wage-claim history, correction process, and compliance training records.
  • Provide payroll register samples, time edit logs, and site or supervisor sign-offs.
Great answer
Hours are captured through biometric time clocks, exceptions require supervisor approval, and all edits are logged and reviewed weekly. We reduce buddy punching with access control systems, and we manage overtime by account with clear rules, including when it is billable versus absorbed. We have had limited wage issues in the last 3 years, and we can show our documented correction process.
Good answer
We use a timekeeping system and review timesheets, but overtime control and audit trails need work on higher-churn posts.
Red flag
Guards text in their hours, and we fix it in payroll. We do not track edits.
How Rejigg helps:Rejigg makes it easier to share timekeeping policies and supporting reports securely, which can reduce the buyer’s push for punitive holdbacks.
How much of your “service revenue” is really callback and warranty? What’s your callback problem, and what do you do about it?
Important
Warranty & Callbacks

What buyers determine

Buyers are looking for hidden margin loss from free truck rolls that consume technician capacity. They also want to know what drives callbacks: workmanship, manufacturer defects, network issues, or user training. Each cause has a different fix and a different implication for future margin. A clear policy and tracking usually reads as operational maturity.

How to prepare

  • Categorize the last 60–90 days of return visits by cause.
  • Write a warranty and callback policy with billable rules and exception approvals.
  • Add a commissioning and closeout QC checklist to reduce repeat issues.
  • Track callback rate by job type and technician.
Great answer
We separate billable service from warranty and callback work, and we can show the last 30 days categorized by cause. Our policy states what is covered, what is billable, and who can approve exceptions. We track repeat issues by job type and technician. After adding a quality control inspection step, callbacks dropped from 15 to 5 per month.
Good answer
We know callbacks hurt capacity, and we have informal rules, but we do not consistently categorize causes or measure trends.
Red flag
We do not track callbacks. It is just part of taking care of customers.
How Rejigg helps:Rejigg helps you show callback tracking and policy up front so buyers can separate real service revenue from cleanup work.
Are you authorized with key manufacturers, and is that authorization transferable? What happens if they change the rules?
Important
Vendor Dependencies

What buyers determine

Buyers want to know they will keep pricing, support, warranties, and software access after the sale. They also check whether dealer status and certifications are tied to one technician or to the owner’s rep relationship. Platform concentration can work when customers standardize on a system, but buyers will price in the risk of rule changes, lead-time spikes, or access loss.

How to prepare

  • List top platforms by revenue and margin impact, including status, requirements, and renewals.
  • Document who holds certifications and set a redundancy plan.
  • Explain rebate and project registration programs and their margin impact.
  • Inventory portal logins and software licenses, including transfer steps.
Great answer
Our top vendors are ADT, Securitas, and G4S. We documented dealer status, annual requirements, and the technician certifications that keep it active. Portal and software access sit under company-controlled emails, and we confirmed transfer steps where needed. We focus on a few platforms because customers ask for them, and we mitigate vendor changes with secondary sourcing, approved substitutions, and redundant training.
Good answer
We have the right vendor relationships and certifications, but transfer steps and single-point dependencies still need to be documented.
Red flag
We buy from whoever has stock. Authorizations are informal and tied to my relationships.
How Rejigg helps:Rejigg helps you document manufacturer status, certifications, and software access cleanly so buyers can diligence vendor continuity quickly.
Who owns the customer relationship when something goes wrong? What would a new owner trip over in the first 90 days?
Important
Owner Dependence

What buyers determine

Buyers are testing whether escalations, scheduling decisions, and exceptions live with the team or with the owner. They also want the real list of operational tripwires: portals tied to personal emails, key tech or supervisor risk, permit delays, renewals, and site rules that only one person remembers. Heavy owner dependence usually leads to longer transitions, earnouts, or a lower price.

How to prepare

  • Map escalation paths and name the non-owner decision-makers by function.
  • Write a 90-day risk list with owners, due dates, and mitigations.
  • Document customer reporting cadence: incident reports, DARs, closeout packages.
  • Shift escalations away from the owner before going to market.
Great answer
Escalations go to the Security Operations Manager first, with clear thresholds for when I step in, and key clients like Acme Corporation already follow that structure. We maintain a 90-day risk list covering key staff coverage, access control system ownership, contract renewals, security permits, and customer expectations, with mitigations in progress. I can support a defined transition, but day-to-day scheduling and client calming do not depend on me.
Good answer
I still handle most escalations, but we are training a manager to take more of those calls, and we have identified the main 90-day risks.
Red flag
Clients call me, and I handle it. A new owner can learn the details after the sale.
How Rejigg helps:Rejigg’s Owner’s Guide and structured workspace help you document handoffs and reduce owner dependence in a way buyers can verify.
What happens to sales after closing: where do leads come from, and who closes them?
Good to have
Growth Engine

What buyers determine

Buyers want a sales engine that survives the owner, especially for quoting and design work. In physical security, lead flow often comes from the installed base, property managers, electricians, IT providers, door companies, and GC relationships. A trackable funnel and standardized estimating typically supports a higher multiple. If sales stays owner-only, buyers often bake in a longer transition and slower growth.

How to prepare

  • List top lead sources with last-12-month volume and conversion by job type.
  • Document estimating templates, pricing guardrails, and proposal standards.
  • Map the sales process by stage and name who owns each step.
  • Track referral partners and assign relationship ownership beyond the owner.
Great answer
Leads come from various sources, about 40% from installed-base service calls, 30% from property managers and referrals, and 30% from partner channels. We track close rates by job type. Estimating uses templates and labor-hour guardrails so quotes do not depend on me. Sarah Johnson, our Senior Project Manager, runs most site walks and closes work under $15,000, with an escalation path for complex projects.
Good answer
We know our lead sources and have a pipeline, but estimating and closing still run through me too often.
Red flag
Work is word of mouth. I quote and close everything, and we do not have a repeatable process.
How Rejigg helps:Rejigg puts you in front of vetted buyers who understand security sales cycles, and its tools help you manage outreach, NDAs, and scheduling in one place.

Straight from buyer evaluations

“Nearly a third of revenue comes from maintenance agreements on camera and access control systems, and almost nobody cancels. That kind of steady, repeating income in a security company is rare and it's exactly what made me want to move fast.”
Steady Repeat RevenueBuyer impressed by recurring maintenance revenue at a security integrator
“The operations manager has been running installs and dispatch for over a decade, and the owner hasn't touched a service ticket in months. The technicians report to him, not the founder. That's a real business.”
Runs Without the OwnerBuyer seeing how the team operates without the owner
“Over ninety percent of employees hold active security clearances, and the facility clearance has been maintained for years. You can't build that from scratch. It took them a decade. That's what makes this company special.”
Cleared WorkforceBuyer recognizing the value of a cleared workforce
“The contract backlog runs out past four years with funded options. Several contracts are effectively the only option for the work. That kind of locked-in revenue is extremely rare and it gave me the confidence to make a strong offer.”
Long-Term ContractsBuyer impressed by long-term government contract backlog
“They do cameras, access control, intrusion systems, and service agreements all under one roof. Clients don't want to manage four different vendors. That one-stop-shop setup is why their customers stick around.”
Full ServiceBuyer seeing the benefit of offering multiple security services

How buyers value this type of business

Where you land in that range depends on how much of your revenue is under contract, whether your team holds transferable credentials or clearances, and how much the owner is involved day-to-day.

3x–8x
annual profit
Depending on contracts, team credentials, and how much runs without you

What drives a premium

  • Customers on service contracts
    Maintenance agreements and monitoring contracts that renew every year give buyers steady income they can plan around.
  • A team with credentials and clearances
    Security clearances, locksmith licenses, and certifications are expensive and slow to get. Having a team that already holds them is a real advantage.
  • Contracts that extend years into the future
    Long-term government or commercial contracts with option years give buyers revenue they can count on well past the closing date.
  • Multiple services under one roof
    Companies that install, monitor, and service cameras, access control, and alarm systems all together are worth more than those that only do one thing.

Common add-backs

Personal vehicles that run through the company fleetYour salary above what you'd pay a general managerOne-time facility buildout or clearance processing costsPersonal insurance, memberships, or family phone plans run through the business

What the process looks like

5–8 months from listing to closemedian 201 days across closed deals
  1. 1
    Listing
    The day your business goes live on Rejigg.
  2. 2
    First messageMedian: 4 days later
    A buyer requests a conversation by sending a first pitch.
  3. 3
    First callMedian: 7 days later
    Your first completed call with a buyer to answer questions about your business.
  4. 4
    Letter of intentMedian: 59 days later
    A buyer submits an LOI and you choose to accept, decline, or negotiate.
  5. 5
    Deal closeMedian: 89 days later
    Assuming all is well in due diligence, you close the deal.
See the data behind this timeline in the 2026 Insight Report
Typical buyer types
Security companies looking to expand into new territories or add servicesIT managed service providers looking to add physical security for their commercial clientsFirst-time buyers with military, law enforcement, or government backgroundsCompanies building a network of security services businesses across a region

Common questions about selling a Physical Security Services business

Ready to see what your business is worth?

Share a few details and get an honest valuation. No pressure, no commitment.