Home / Red flags / SaaS

Industry guide

Red flags when buying a SaaS business

A small SaaS company can show a tidy SDE while churn is eating the book, the founder still writes the code and answers support, and two customers are half of the MRR. If you buy it like a Main Street shop, you may be using the wrong yardstick.

Common seller tricks in SaaS

Sellers will lean on MRR or a multiple of a founder-adjusted profit, and skip logo churn, the quality of the revenue, and how much of the product walks out the door with the founder.

Which numbers to verify

You want MRR or ARR, logo and dollar churn, net revenue retention, and a cohort view — not just a P&L. Reconcile card or invoice collections. Split new, expansion, and churned revenue. Recast the founder’s engineering and support time at a real cost. If two customers are a large share, model them leaving. Deferred revenue and annual prepayments are liabilities as well as cash.

Licensing and key-person risk

The company should actually own the IP, the accounts, and the domain. Open-source use, contractor agreements, and employee assignments should be clean. Security, privacy, and (for some buyers) SOC 2 or similar requests from customers can be a sales blocker. This is a corporate and IP diligence exercise, not just a bookkeeping one.

Equipment and condition

The stack, the cloud bill, and the third-party APIs are the plant. A cheap infrastructure bill can hide a single-region, single-engineer risk. Confirm who owns the code repository, the app-store listings, and the analytics. A product that only the founder can deploy is not transferable yet.

Seasonality and the calendar

SaaS is usually less seasonal than a shop, but education, retail, and tax-adjacent products have calendars. Annual contracts can bunch renewals in one month. Look at new logos and churn by month. A big logo that signed last December is not yet a pattern.

Customer concentration

Customer concentration is the obvious one. Channel or platform concentration (a single app marketplace, a single integration) is the quieter one. A founder’s personal network as the only sales motion is concentration too. All three belong in the questions.

Questions to ask before you make an offer

  1. Please provide MRR, new, expansion, and churned revenue by month for at least 24 months, reconciled to collections.
  2. What are logo churn and net revenue retention, and may I see a simple cohort view?
  3. What share of MRR sits with the largest five customers, and what are their contract terms and notice periods?
  4. How much of the code, support, and sales does the founder still handle, and what is a realistic replacement cost?
  5. Is the IP assigned to the company, including contractor work, and who controls the repositories and domains?
  6. What is the paid-acquisition picture, and what happens if current channels get more expensive?
  7. How is deferred revenue from annual plans recorded, and what service is still owed?
  8. What security, privacy, or uptime commitments exist, and have there been incidents?
  9. Why is SDE the right way to talk about this company, rather than retention and gross margin?
  10. After an LOI, may I have a technical diligence session and speak with your accountant?

Have the listing and the P&L? Run them through a full red-flag check, including numbers, flags, and questions.

Upload the P&L for a full red-flag check

Disclaimer. Deal Check is not financial, legal, or accounting advice. These pages and calculators are educational planning tools and can miss context. Verify every number with a CPA and a business broker, and do your own due diligence before making an offer.