What Does Security Company Acquisition Due Diligence Actually Examine?

What buyers examine in security company acquisition due diligence — and how clean operations data raises valuation. Prep your data room 12–24 months out.

Yonah Nathan — Co-founder & Head of Product

Published July 12, 2026 Updated July 23, 2026 7 min read

The contract security industry has been consolidating for years. Allied Universal built itself through serial acquisition; GardaWorld and Securitas have absorbed regional firms across North America; and below the mega-deals, private equity platforms and roll-ups are actively buying guard companies in the $2M–$50M revenue range. If you own a guard company, odds are you've already had an unsolicited email from a buyer or broker.

Here's the asymmetry: buyers do this constantly, sellers do it once. The buyer's diligence team knows exactly what to ask for; most sellers discover what they should have been tracking three weeks into diligence, when it's too late to fix.

This is general information, not financial or legal advice — engage an M&A advisor, accountant, and attorney before any transaction.

Why are buyers everywhere in guard services right now?

Guard services attract acquirers for structural reasons: recurring contracted revenue, fragmented ownership, and consolidation economics — a buyer folding your accounts into an existing branch keeps the revenue and sheds much of the overhead. Deals are commonly valued as a multiple of adjusted EBITDA, with the multiple driven by size, growth, contract quality, and — the part sellers underestimate — how believable your numbers are.

Two companies with identical P&Ls do not get identical offers. The one that can prove where every billed hour came from gets the cleaner deal.

What do buyers examine beyond the financial statements?

Assume any competent buyer will audit the financials. The differentiating diligence happens in operations. Expect deep requests in five areas:

Note how many rows are operations data, not accounting. A buyer discounting for "unknown OT leakage" isn't being aggressive — they're pricing uncertainty, and every question you can answer with a record instead of an estimate removes a discount. If OT and unbilled hours are eating you today, that's doubly worth fixing — see where security companies leak revenue — because leakage suppresses both current profit and the multiple applied to it.

How does clean operations data raise a security company's valuation?

Diligence is an argument about revenue quality: the seller asserts durability, the buyer probes for reasons to disbelieve. Operations data is how you win it:

• Verifiable service delivery. GPS-verified clock-ins, checkpoint scans, and delivered client reports prove that billed hours correspond to guards actually at post. That converts "trust me" revenue into evidenced revenue — the same proof-of-service records that defend an invoice dispute defend a valuation.
• Per-account margin, from system data. When scheduled hours, worked hours, and billed hours reconcile by account, your account-level margins are facts, not allocations. Buyers pay for facts.
• Client satisfaction you can show, not claim. Report delivery logs, portal usage, low dispute rates, and long tenure are the closest thing to churn insurance a diligence team will see.
• Documented incident history. A complete, consistent incident archive is paradoxically better than a thin one — buyers assume undocumented incidents happened anyway; documentation shows control. (Writing quality matters here too: how to write security incident reports.)
• Fewer holdbacks and reps. Uncertainty in diligence doesn't just lower price — it shows up as escrows, earnouts, and heavier indemnification. Clean data shrinks the "unknowns" a buyer needs to protect against.

The contrast case is the shoebox company: profitable, well-run by feel, its operational truth living in paper DARs, texted schedule changes, and the owner's head. That company may be genuinely excellent — but excellence a buyer can't verify gets priced like risk. At Ranger Guard, over a year of running every post through SNTNL means service delivery, hours, and incidents across 400+ employees and four markets exist as one queryable record a diligence team can sample and verify rather than take on faith.

What belongs in a guard company's data room?

Beyond the standard corporate and financial documents your advisor will specify, the operations section of a guard-company data room should include:

1. Contract file per account: signed agreement, amendments, current rates, escalator terms, notice provisions, tenure.
2. Revenue and margin by account, 24–36 months, reconciled to delivered hours.
3. Churn analysis: accounts lost, when, why, and revenue impact.
4. Payroll and OT detail by site and period, with OT attributed to cause (vacancy, call-off, client request).
5. Workforce roster: headcount, tenure distribution, turnover rate by market, wage bands, license/registration status per officer.
6. Incident and claims archive: incident reports, insurance claims history, open litigation, workers' comp experience.
7. Service-delivery evidence: patrol/checkpoint completion records, exception (missed-scan) history, client report delivery logs.
8. Compliance file: company licenses by state, insurance certificates, training records.
9. Systems summary: what software runs the business, what data it holds, and that the data is exportable. Ask your vendor now — free data export is standard with SNTNL, and discovering mid-diligence that your records are hostage to a platform is a bad day.

How do you prepare 12–24 months before a sale?

Diligence-readiness is mostly about starting early, because the most valuable evidence is history — you can't backfill 24 months of verified service records in a quarter. The runway:

• T-24 months: Get operations onto a system of record. Every clock-in verified, every patrol logged, every report delivered with a log. This is the foundation everything else queries.
• T-18: Build per-account margin reporting and start managing to it. Fix or exit the accounts that don't pencil.
• T-12: Attack OT leakage and turnover — both flow straight into adjusted EBITDA, and the multiple applies to every dollar you recover. Renew key contracts onto clean written terms with healthy notice periods.
• T-6: Assemble the data room in draft. Run a mock diligence: have your advisor request documents cold and see what takes longer than a day to produce.
• Ongoing: Diversify concentration; a top client above roughly a third of revenue gets priced as risk no matter how good the relationship is.

The pleasant surprise: every one of these steps makes the company more profitable to keep, too. Diligence-ready and well-run are the same condition.

Whether a sale is two years out or purely hypothetical, the move is the same: put your operation on a system of record now, so your numbers become evidence instead of assertions. To see what a queryable, exportable operational archive looks like at a 400+ employee company, book a demo — we'll show you the data, because the data is the point. Free 30-day pilot. $995 onboarding, credited in full to your first invoice when you continue on a 6-month or annual plan.

This is general information, not legal advice — verify current requirements with the licensing agency and your attorney.