# Client Concentration

Managing a Managed Service Provider (MSP) is often a balancing act between technical delivery and commercial risk. One of the most significant, yet frequently overlooked, risks to the long-term stability and enterprise value of a business is Client Concentration. In simple terms, this occurs when a disproportionate percentage of your total revenue comes from a single client or a very.

Managing a Managed Service Provider (MSP) is often a balancing act between technical delivery and commercial risk. One of the most significant, yet frequently overlooked, risks to the long-term stability and enterprise value of a business is **Client Concentration**. In simple terms, this occurs when a disproportionate percentage of your total revenue comes from a single client or a very small group of clients.

While landing a "whale" — a massive contract that doubles your Monthly Recurring Revenue (MRR) overnight — feels like a major victory, it creates a structural vulnerability. If that one client decides to bring their IT in-house, gets acquired, or suffers a financial downturn, your MSP could face an immediate and existential crisis. Understanding how to measure, manage, and mitigate this risk is essential for any owner looking to build a resilient, profitable, and ultimately saleable business.

## Key Takeaways

- **Risk Definition:** Client concentration is a measure of how much your business relies on its largest customers for revenue and profit.
- **The 10% Rule:** A common industry benchmark is that no single client should account for more than 10% of total revenue.
- **Valuation Impact:** High concentration significantly reduces the multiple a buyer is willing to pay during an acquisition.
- **Operational Vulnerability:** Large clients often demand bespoke workflows that break your standardisation and erode margins.
- **Mitigation Strategy:** Diversification through aggressive sales, tiered service offerings, and proactive account management is the best defence.
- **Decision Power:** Reducing concentration gives you the "power to say no" to unreasonable demands from toxic or unprofitable large accounts.

### What is Client Concentration?

In the MSP context, **Client Concentration** refers to the extent to which a provider's revenue is generated by a limited number of customers. It is a metric used by lenders, investors, and owners to assess the financial health and risk profile of the company. If your top client accounts for 30% of your revenue, you aren't just an MSP; you are effectively a department of that client, but without the employment protections.

High concentration is often a byproduct of early-stage growth. When you start with two employees and land a 200-user law firm, that client becomes your world. The danger arises when the MSP fails to "outgrow" that client by adding enough smaller or mid-sized accounts to dilute the reliance on that single source of income.

| Concentration Level | Revenue % (Top Client) | Risk Assessment | Impact on Valuation |
| --- | --- | --- | --- |
| Low | < 10% | Healthy / Diversified | Premium Multiple |
| Moderate | 10% - 20% | Warning Zone | Standard Multiple |
| High | 20% - 40% | High Risk | Significant Discount |
| Critical | > 40% | Existential Threat | Likely Unsaleable |

## The Commercial Reality of the "Whale" Client

We often see MSP owners celebrate the signing of a massive contract, and for good reason—it’s a testament to the team’s capability. However, from a commercial perspective, these large accounts often come with "hidden" costs that can hamper your overall profitability. When one client pays the majority of your bills, they know they have leverage. This often leads to "scope creep" where the MSP performs out-of-scope work for free just to keep the client happy.

Luis Navarro, founder of MSP Agenda, saw this firsthand while building Totality Services. Scaling to 150+ clients required a disciplined approach to ensuring no single entity could jeopardize the livelihood of the entire team. As Luis often highlights, the goal of an MSP should be to build a business that is a "machine," not one that is beholden to the whims of a single point of failure.

### Operational Inefficiency and "Special" Treatment

One of the biggest risks of high client concentration is the destruction of **Standardisation**. Successful MSPs thrive on doing the same things, the same way, for every client. Large clients often demand their own specialised stack, custom reporting, or dedicated engineers who don't work on other accounts.

This creates an "island" within your business. If that client leaves, you are left with specialised staff and tools that you no longer need, but are still paying for. It makes your technical team less efficient and complicates your service delivery model, ultimately eating into your net profit margins.

### The Psychology of Fear in Account Management

When you have high client concentration, your account managers and engineers become afraid to deliver "hard truths." If a Security Review reveals a critical vulnerability that requires a $50,000 investment, an MSP with low concentration will present that recommendation with confidence. They know that protecting the client is the priority.

However, if that client represents 40% of the MSP’s revenue, the owner might hesitate. They fear that pushing too hard on a necessary security project might annoy the client and trigger a RFP (Request for Proposal) process. This hesitation compromises the security of the client and the integrity of the MSP. True partnership requires the ability to walk away from a client that refuses to follow your standards—a luxury you don't have when your concentration is too high.

## How to Calculate Your Concentration Risk

Measuring your risk isn't just about looking at your largest invoice. You need to look at the data through a few different lenses to get a true picture of your vulnerability. A good starting point is to list your top five clients and calculate their percentage of your total **Annual Recurring Revenue (ARR)**.

#### 1. The Single Client Test

Calculate: `(Annual Revenue from Client A / Total Annual Revenue) x 100`. 

If this number is above 15%, you need a plan to grow your way out of that dependency. If it's above 25%, you are in a high-risk zone that will deter most sophisticated buyers.

#### 2. The Top-3 Concentration

Calculate the combined revenue of your three largest clients. In a healthy, mature MSP, your top three clients should ideally not exceed 30-35% of your total revenue. If three clients make up 60% of your business, losing them in a short window (which can happen during industry-wide downturns) would be catastrophic.

#### 3. The Profit Concentration

This is often overlooked. Sometimes a large client brings in a lot of revenue but very little profit because of the "special" support they require. If a client represents 20% of your revenue but 40% of your support tickets, they are actually a liability. You must analyse **Gross Margin per Client** to see if your largest revenue sources are also your largest profit sources.

## Impact on Enterprise Value and M&A

If your ultimate goal is to sell your MSP for an eight-figure sum, similar to the exit Luis Navarro achieved with Totality Services, you must view your business through the eyes of an acquirer. Private Equity firms and strategic buyers are terrified of client concentration. They see it as a "cliff" — if the top client leaves the day after the deal closes, the valuation they paid is immediately wrong.

### The "Multiple" Penalty

Acquirers apply a "multiple" to your EBITDA (Earnings Before Interest, Taxes, Depreciation, and Amortization) to determine the purchase price. High client concentration acts as a massive anchor on that multiple. An MSP with $1M EBITDA and low concentration might trade for a 7x or 8x multiple. That same MSP with a 35% concentration in one client might only attract a 4x or 5x multiple, or the buyer might insist on an "earn-out" where a large portion of the price is only paid if that specific client stays for two years.

### Due Diligence Scrutiny

During due diligence, a buyer will look at the contract terms of your largest clients. They will check for "change of control" clauses that allow the client to terminate the contract if the MSP is sold. If your biggest client has this clause and you have high concentration, the client essentially holds a veto over your ability to sell your own company.

## Strategies to Mitigate Client Concentration

Reducing concentration is not about firing your biggest client. It’s about growing the rest of your business so that the "whale" becomes a "dolphin." Here is how successful MSPs manage this transition:

### 1. Aggressive New Logo Acquisition

The most obvious solution is to sell more. However, you should specifically target "ideal" clients that fit your standardised model. If your largest client is a 200-seat firm, focus your marketing on winning five 40-seat firms. This spreads your risk across different industries and decision-makers.

### 2. Tiered Service Expansion

Increase the revenue from your smaller and mid-sized clients by performing more frequent and effective Security Reviews. By identifying gaps in their current stacks and moving them to higher-value managed security tiers, you increase the average revenue per user (ARPU) across your entire base. This naturally dilutes the percentage held by your largest client.

### 3. "Right-Sizing" the Large Account

Review the margins on your largest account. If they are demanding bespoke services, it’s time to have a commercial conversation. Increase their pricing to reflect the actual cost of support. If they accept, your revenue from them stays high but your margins improve, allowing you to hire more staff to support new, smaller clients. If they leave, you have freed up massive technical capacity to serve more profitable, less demanding customers.

### 4. Industry Diversification

Concentration isn't just about single companies; it's also about sectors. If 70% of your clients are in commercial real estate and that market crashes, your business is in trouble. Aim to spread your portfolio across healthcare, legal, finance, and professional services. This protects you from macro-economic shifts that hit specific industries.

## The Role of Security Reviews in Managing Risk

One of the best ways to combat client concentration is to improve the way you handle account management for your entire client base. Many MSPs focus all their senior energy on the "Big Client" while ignoring the dozens of smaller ones. This is a mistake. Each of those smaller clients represents the future stability of your firm.

By using a platform like MSP Agenda, you can standardise your Security Reviews so that every client, regardless of size, receives a high-quality, professional assessment. This does two things:

 It demonstrates your value to smaller clients, increasing retention.
 It creates a consistent pipeline of project revenue from your whole base, rather than relying on one big client to approve one big project once a year.

When you provide a clear, commercial roadmap for security to every client, you make it easier for them to say "yes" to recommendations. This increases your overall MRR and project revenue, effectively "growing the pie" so that your largest client represents a smaller slice.

## Common Misconceptions About Large Clients

There are several myths that lead MSP owners into the trap of high client concentration. Recognising these early can save you years of stagnant growth.

### Myth: "Big Clients are More Stable"

Actually, the opposite is often true. Large companies are more likely to be acquired, merge, or decide to build an internal IT team. They are also more likely to have a professional procurement department that shops your contract around every three years to drive prices down. A portfolio of fifty 20-seat companies is significantly more stable than one 1,000-seat company.

### Myth: "We Can't Afford to Lose Them"

If you feel you can't afford to lose a client, you have already lost your leverage. The moment a client realises they are "too big to fail" for your business, the relationship becomes lopsided. You begin to accept lower margins, worse treatment for your staff, and higher liability. You must always be in a position where losing any single client—while painful—would not sink the ship.

### Myth: "They Are Our Best Referral Source"

While large clients can be great references, they often occupy a different "world" than your typical ideal prospect. A referral from a 500-user firm to another 500-user firm might just land you a second whale, doubling your concentration risk instead of solving it. You need a referral engine that feeds your standardised, scalable sweet spot.

## Frequently Asked Questions

#### How much client concentration is too much?

While every business is different, the "10% Rule" is a widely accepted benchmark. If any single client accounts for more than 10% of your total revenue, you should begin active efforts to diversify. Once a client hits 20-25%, you are in a high-risk category that will impact your borrowing power and your company's valuation.

#### Does client concentration matter if the client is on a long-term contract?

Yes. Contracts can be broken, companies can go bankrupt, or they can be acquired by a firm that already has its own MSP or internal IT. A contract is a legal document, but it doesn't prevent the operational and financial shock of losing a huge portion of your income overnight.

#### Should I fire a large client to fix my concentration?

Rarely. The goal is "dilution, not deletion." You want to keep the revenue and profit from the large client while aggressively growing the rest of your business. The only time you should fire a large client is if they are consistently unprofitable, toxic to your staff, or refuse to adhere to essential security standards that put your MSP at risk.

#### How do buyers view concentration in an MSP exit?

Buyers see it as a risk to future cash flows. They will often structure the deal with an "earn-out" or "holdback," meaning you don't get the full purchase price unless that large client remains with the business for 12 to 24 months post-sale. High concentration almost always results in a lower upfront payment.

#### Can I mitigate concentration by selling more to existing small clients?

Absolutely. This is one of the most effective strategies. By performing regular, high-quality Security Reviews, you can identify unmet needs in your smaller clients. Moving a 20-user client from a $150/user seat to a $250/user seat through advanced security and compliance services helps balance your revenue distribution without the high cost of acquiring new "logos."

#### What if my "Big Client" is actually several subsidiaries?

If the subsidiaries have the same parent company and a single decision-maker at the top, they should be counted as one client for concentration purposes. If the parent company decides to switch providers, all subsidiaries will likely follow.

## Conclusion

Client concentration is a silent growth killer. It feels like success when you're winning the business, but it acts as a cage as you try to scale. By focusing on standardisation, aggressive sales to your "sweet spot" market, and using tools to maximise the value of every client in your portfolio, you can move from a position of vulnerability to a position of strength.

Remember, the most valuable MSPs aren't the ones with the biggest clients; they are the ones with the most predictable, diversified, and standardised revenue streams. Building your business with this mindset—the same mindset Luis Navarro used to scale and exit Totality Services—is the surest path to long-term profitability and a successful future exit.

---

Source: https://mspagenda.com/glossary/client-concentration
Last updated: 2026-04-08