MSP / IT & Cybersecurity – What Got You Here Won't Get You To What's Next

Technology — Managed Service Provider

What Got You Here Will Not Get You There.

A $5.8M managed service provider had strong recurring revenue, a loyal client base, and a 10-year track record in IT and cybersecurity. What it couldn't tell you was which clients were profitable. In a recurring revenue business, that's the only question that matters for growth. A Financial Discovery Assessment answered it — and found $368,000 more along the way.

$368K

Total Annualized Value Identified

$165K

Strategic Planning Value

$147K

Workforce & Leadership Value

$10M+

Target Revenue With Clear Path

Strong MRR. No Idea Which Clients Were Actually Making Money.

Managed services is a deceptively clean-looking business model. Monthly recurring revenue shows up predictably. The P&L looks consistent. The bank account behaves. And then you realize you've been growing a client base where some accounts are profitable, some are breaking even, and some are quietly consuming margin every month — and you can't tell which is which.

This MSP had built a real business over a decade — genuine technical expertise in IT infrastructure and cybersecurity, client relationships that were sticky, and a team that delivered. But the finance function was still operating like a much smaller company. Deferred revenue wasn't being recognized correctly, which was distorting the P&L in ways that made profitable periods look flat and flat periods look acceptable. Worker classification for key technical roles hadn't been formally reviewed, creating payroll tax exposure and making compensation planning difficult.

Leadership knew the next milestone was $10M. What they didn't know was whether the current client mix and cost structure would support that growth — or whether they'd be adding revenue that made the problem bigger without making the business better.

For technology businesses at this stage, the transition from founder-led growth to managed scale requires a different kind of financial leadership. That's when they called us.

The Assessment

In Recurring Revenue, the Business You Think You Have and the Business You Actually Have Are Often Different.

Here's what a Financial Discovery Assessment surfaced in a $5.8M managed services operation — findings that were specific to this business model and this industry.

The Revenue Picture Was Misleading

No Total Cost to Serve Model — No Client Profitability

The MSP tracked revenue per client but had never built a fully-loaded cost model that allocated help desk time, tooling, escalation hours, and management overhead by account. Without that, the monthly P&L looked healthy while specific clients — often the loudest, most demanding ones — were consuming margin the business didn't know it was losing. We built the Total Cost to Serve model that made client-level profitability visible for the first time. Leadership immediately identified which accounts to retain, reprice, or exit.

Action: Client Profitability Model Built

Deferred Revenue Recognized Incorrectly

Prepaid service contracts and annual agreements were being recognized inconsistently — some expensed immediately, some deferred, without a consistent policy. This created a P&L that overstated revenue in some periods and understated it in others, making trend analysis unreliable and budget-to-actual comparisons meaningless. We established a proper revenue recognition policy and restated the affected periods, giving leadership a P&L they could actually use for planning.

Action: Revenue Recognition Policy Established

R&D Tax Credits Underdefended and Under-Claimed

The MSP had qualified R&D activity — proprietary monitoring tools, custom automation scripts, and security workflow development — but the technical documentation supporting the credit claims was too high-level to fully defend under scrutiny. Strengthening the project-level documentation and expanding the qualifying activity inventory identified $10,000 in immediate credit value and created a more defensible position going forward.

Identified Value: $10,000+

The Risk Exposure Was Specific to This Industry

E&O and Cyber Liability Limits Not Scaled With the Business

An MSP that manages client infrastructure, credentials, and security systems carries professional liability exposure that scales with the value of what it protects. As the business had grown from $2M to $5.8M, contract values increased and the scope of systems under management expanded — but insurance limits hadn't been reviewed or updated to reflect that growth. We identified gaps between what the policies covered and what the contracts required, then restructured coverage accordingly. This is a common and expensive oversight in technology services businesses.

Action: E&O and Cyber Liability Coverage Restructured

Worker Classification Exposing the Business to Payroll Tax Risk

Several technical roles were engaged as contractors without a formal classification review — the kind of review that most early-stage tech businesses skip and most growing ones eventually pay for. Misclassified workers create payroll tax exposure, benefits liability, and complications in the event of a DOL audit. We conducted a formal W-2 vs. contractor review, reclassified two roles, and structured the workforce to eliminate the exposure going forward.

Action: Workforce Classification Review Completed

Compensation Not Tied to the Metrics That Drive Margin

The incentive structure for key technical and account management roles wasn't aligned with gross margin — the metric that actually matters in managed services. Sales comp rewarded new MRR without weighting for contract profitability. Technical leads weren't measured on ticket resolution efficiency. We redesigned the incentive structure to drive the behaviors that improve margin, projecting $63,000 in annualized value through better workforce cost alignment.

Projected Annualized Value: $63,000

The Business That Emerged From the Assessment

Leadership now knows which clients to grow, which to reprice, and which to exit. Deferred revenue is recognized correctly, so the P&L reflects actual performance. Compensation drives the right behaviors. Insurance matches the actual risk profile. The path to $10M is built on margin, not just revenue.

Is This Your Business?

If You Can't Tell Which Clients Are Profitable, You're Scaling the Wrong Thing.

A Financial Discovery Assessment for a technology or managed services business finds the profitability gaps, the recognition errors, and the liability exposure that recurring revenue tends to hide. Most engagements identify more value than they cost before they're finished.

Learn About the Assessment Talk to Us First

Common Questions

Financial Leadership for Technology and Managed Services

How do I know which clients are actually profitable in an MSP?

Client profitability requires a Total Cost to Serve model that allocates not just direct labor but help desk time, tooling costs, escalation hours, and account management across each client. Most MSPs track revenue per client but not fully-loaded cost per client. Building this model is one of the most impactful things a fractional CFO does in the first 60 days — and the results are almost always surprising.

Do managed service providers qualify for R&D tax credits?

Many do — particularly those developing proprietary tools, scripts, monitoring systems, or security workflows. The credit requires documentation of qualifying activities and associated wages. Underdocumented claims leave money on the table and create defensibility risk. A Financial Discovery Assessment typically identifies whether your current R&D claim is optimized and properly supported.

What insurance does a cybersecurity company need?

MSPs and cybersecurity firms need E&O and Cyber Liability coverage that reflects the actual scope of systems they manage and the contractual obligations they carry. As the business grows, contract values and scope increase — but insurance reviews often don't happen at the same pace. Gaps between what policies cover and what contracts require are among the most common findings in technology company assessments.

When does an MSP need a fractional CFO?

Usually between $3M and $8M in ARR, when the business has outgrown what a bookkeeper can manage but isn't large enough to justify a full-time CFO. Key signals: you can't tell which clients or service lines are profitable, your revenue recognition policy is informal, you're not sure whether your insurance matches your contract requirements, or you're approaching a growth milestone and don't know if your cost structure supports it.

Service

What Got You Here Won't Get You To What's Next