How to Buy a Surveillance & Access Control Business with an SBA Loan
A step-by-step financing guide for acquiring a commercial security integration company — from verifying recurring monthly revenue to closing with SBA 7(a) capital.
Find SBA-Eligible Surveillance & Access Control BusinessesSBA Overview for Surveillance & Access Control Acquisitions
SBA 7(a) loans are one of the most effective financing tools for acquiring surveillance and access control integration businesses in the $1M–$5M revenue range. These businesses are well-suited for SBA financing because they generate predictable recurring monthly revenue (RMR) from long-term monitoring and service contracts, own tangible assets like test equipment, vehicles, and installed hardware, and have documented commercial client rosters that lenders can underwrite. A typical SBA-financed acquisition in this space involves a buyer contributing 10–15% equity injection, the SBA 7(a) loan covering 75–80% of the purchase price, and a seller note of 5–10% on standby for two years. The RMR base is the core underwriting asset — lenders will scrutinize contract quality, attrition rates, and renewal terms as carefully as they review the P&L. Businesses with 20–40% of total revenue from recurring contracts, clean three-year financials, and licensed technician teams are the strongest SBA loan candidates in this sector.
Down payment: Buyers acquiring a surveillance or access control business with an SBA 7(a) loan should plan for a minimum 10% equity injection of the total project cost, which includes the purchase price plus any working capital or closing costs financed in the loan. On a $2M acquisition, this means a minimum of $200K in liquid buyer equity. In practice, many SBA lenders require 15–20% equity when the deal involves significant goodwill — which is common in security integration acquisitions where the intangible value of the RMR base, installed customer relationships, and brand reputation drives the majority of the purchase price above tangible asset value. A seller note of 5–10% on 24-month standby (meaning no payments to the seller for two years) is frequently used to bridge the gap between SBA loan proceeds and the full acquisition price, and most SBA lenders will count a qualifying standby seller note as part of the equity injection. Buyers should not commingle equity sources — funds must be documented as seasoned personal assets, business savings, or 401(k) ROBS rollover structures reviewed by a qualified ERISA attorney.
SBA Loan Options
SBA 7(a) Standard Loan
10-year repayment for business acquisitions; variable rate typically Prime + 2.75%; fully amortizing with no balloon payment
$5,000,000
Best for: Acquiring established commercial security integrators with verified RMR contracts, $300K+ EBITDA, and clean financials — the primary loan structure for most surveillance and access control business acquisitions in the lower middle market
SBA 7(a) Small Loan
10-year term for acquisitions; streamlined underwriting with less documentation; variable rate Prime + 3.00%
$500,000
Best for: Smaller owner-operated CCTV or access control companies with $1M–$1.5M in revenue, limited real estate collateral, and straightforward financials where the buyer seeks a faster path to approval
SBA 504 Loan
10- or 20-year fixed-rate debenture on the CDC portion; requires 10% buyer equity, 40% CDC, 50% bank
$5,500,000 combined (CDC + bank)
Best for: Acquisitions that include the purchase of commercial real estate — such as a security integration company that owns its warehouse, service depot, or installation training facility — where long-term fixed-rate financing on the property is advantageous
Eligibility Requirements
- The target business must be a for-profit U.S.-based security integration company — including commercial CCTV installation, access control, intrusion detection, or managed security services — with annual revenue between $1M and $5M and a minimum of $300K–$500K in verified EBITDA
- The buyer must inject a minimum of 10% of the total project cost (acquisition price plus working capital) from their own liquid, documented funds — not borrowed or gifted capital — typically ranging from $150K–$500K depending on deal size
- The business must hold all required state contractor licenses and local security alarm permits, and all technician certifications (ESA, NICET) must be current and transferable to a new owner at the time of closing
- The seller must provide three years of tax returns, reviewed or compiled financial statements, and a complete recurring revenue schedule listing every active monitoring and service contract with term, monthly value, and renewal clause for lender review
- The SBA borrower must demonstrate relevant industry experience — technology operations, facilities management, IT infrastructure, or prior security integration background — or retain key management with those credentials post-acquisition
- All vendor and dealer agreements with major brands such as Avigilon, Genetec, HID, or Bosch must be confirmed as transferable to the new entity, as these preferred dealer relationships are underwriting factors that directly support business value and revenue continuity
Step-by-Step Process
Define Your Acquisition Criteria and Verify SBA Eligibility
Before approaching lenders, establish your target profile: commercial security integrators with $1M–$5M in revenue, minimum $300K EBITDA, and an RMR base representing at least 20% of total revenue. Confirm you meet SBA borrower requirements — U.S. citizenship or permanent residency, no prior SBA defaults, relevant industry experience, and sufficient personal liquidity for the equity injection. Engage an M&A advisor or business broker with security industry experience to identify qualified targets.
Identify a Target and Sign a Letter of Intent
Once you identify a target surveillance or access control business, conduct a high-level financial review — three years of P&Ls, tax returns, and a preliminary RMR schedule. If the deal metrics align, submit a Letter of Intent (LOI) specifying the purchase price, proposed deal structure (SBA loan, seller note, equity), exclusivity period, and key contingencies including financing and due diligence. The LOI is the document your SBA lender will want to see when you apply for pre-qualification.
Select an SBA Lender with Technology or Service Business Experience
Not all SBA lenders understand how to underwrite recurring monthly revenue from security monitoring contracts. Identify preferred SBA lenders — Preferred Lending Program (PLP) banks, SBA-focused non-bank lenders, or CDFIs — that have closed service business or technology acquisitions. Submit your loan package including the LOI, buyer resume and financial statement, three years of business tax returns, RMR contract schedule, and a preliminary business valuation. A PLP lender can approve in-house without SBA review, reducing time to close.
Complete Full Due Diligence on Recurring Revenue, Licenses, and Technology
This is the most critical phase for a surveillance and access control acquisition. Verify every RMR contract — confirm term, auto-renewal clauses, attrition history, and customer concentration. Commission a cybersecurity posture review if the business manages IP-connected systems in client environments. Audit all state contractor licenses, local alarm permits, ESA and NICET technician certifications, and confirm all are current and transferable. Review vendor and dealer agreements with Avigilon, Genetec, HID, and Bosch for assignability. Engage a CPA to prepare a quality of earnings (QoE) report to validate EBITDA and document owner add-backs.
Negotiate Final Deal Structure and Seller Note Terms
With due diligence complete and lender pre-approval in hand, finalize the purchase price, SBA loan amount, equity injection, and seller note terms. A typical structure: 75–80% SBA 7(a) loan, 10–15% buyer equity, and 5–10% seller note on 24-month standby. If customer relationships are heavily owner-dependent, negotiate an earnout tied to RMR retention milestones at 12 and 24 months post-close. Include employment or consulting agreements for the selling owner to support a 90–180 day transition covering key commercial account introductions and technician retention.
Satisfy SBA Lender Conditions and Prepare Closing Documents
Your lender will issue a commitment letter with conditions — typically including a business appraisal, environmental review (if real property is involved), proof of business insurance including general liability and errors and omissions coverage for IP-connected systems, and confirmation of license and certification transferability. Work with a commercial attorney experienced in security industry acquisitions to draft the asset or stock purchase agreement, bill of sale, non-compete agreements, and any required license assignment documentation for state contractor boards.
Close the Loan and Execute a 90-Day Transition Plan
At closing, SBA loan proceeds fund the purchase price per the settlement statement, the seller note is executed, and equity injection is verified. Immediately post-close, execute your transition plan: notify key commercial accounts with the selling owner present, file license transfers with state contractor boards, update vendor and dealer registrations with Avigilon, Genetec, and HID, and confirm all technician certifications are transferred to the new entity. The first 90 days are critical for RMR contract retention and employee stability.
Common Mistakes
- ✗Failing to obtain a complete RMR contract schedule during due diligence — buyers who rely on the seller's verbal summary of monitoring revenue rather than auditing every individual contract often discover significantly lower verified RMR at closing, creating debt service coverage problems within the first year
- ✗Underestimating state and local licensing complexity — surveillance and access control businesses operating across multiple jurisdictions require separate contractor licenses and alarm permits in each location; assuming licenses automatically transfer to the new owner without confirming state-specific assignment rules can delay or jeopardize the closing
- ✗Ignoring key employee retention risk before closing — certified technicians (ESA, NICET) and the sales staff who manage commercial accounts are the business's most valuable human assets; failing to negotiate retention bonuses or employment agreements before close increases the risk of attrition that directly reduces RMR and triggers earnout disputes
- ✗Choosing an SBA lender unfamiliar with service business or technology acquisition underwriting — lenders who primarily finance equipment or real estate may undervalue or misunderstand RMR-based goodwill, leading to lower loan-to-value approvals, higher equity injection requirements, or declined applications that an experienced lender would have approved
- ✗Neglecting to assess the technology stack's obsolescence risk before agreeing to a purchase price — acquiring a business built on end-of-life DVR/NVR hardware or a proprietary platform with limited vendor support can result in unexpected capital expenditure requirements post-close that erode the returns modeled in the acquisition underwriting
Lender Tips
- Present your RMR documentation as the centerpiece of your loan package — prepare a recurring revenue schedule in Excel or PDF format listing every active contract with customer name, vertical (retail, healthcare, multifamily), monthly value, contract start date, term, and renewal clause; lenders treat verified RMR as durable cash flow that directly supports debt service coverage
- Engage a CPA familiar with security integration businesses to prepare a formal quality of earnings report before submitting to your lender — clearly documented owner add-backs (owner health insurance, personal vehicle, above-market owner salary) strengthen your EBITDA case and reduce lender requests for clarification that slow the approval timeline
- Demonstrate your industry credibility explicitly in your borrower narrative — lenders want to see that you understand the difference between an open-platform integrator and a proprietary system shop, can evaluate technician licensing requirements in your target geography, and have a concrete plan for managing the technology transition from legacy analog to IP and cloud-based platforms
- Select a Preferred Lending Program (PLP) lender for faster approval — PLP lenders have delegated SBA authority to approve loans in-house without submitting to the SBA for credit review, which can reduce approval timelines by four to six weeks in a competitive deal process where the seller may have multiple interested buyers
- Budget for a third-party business appraisal and cybersecurity assessment in your closing cost estimates — most SBA lenders require an independent appraisal for acquisitions involving significant goodwill, and IP-connected surveillance systems create liability exposure that lenders increasingly want assessed before funding; these reports typically cost $3,000–$8,000 combined but prevent surprises at the closing table
Find SBA-Ready Surveillance & Access Control Businesses
Pre-screened acquisition targets with verified financials — free to join.
SBA Loan Calculator
Estimate your monthly payment for a Surveillance & Access Control acquisition
Standard for acquisitions
Powered by Deal Flow OS
dealflow-os.com · Free M&A tools for every stage of the deal
Frequently Asked Questions
Can I use an SBA loan to buy a surveillance and access control business if most of its value is in monitoring contracts, not physical assets?
Yes, and this is actually a common structure in the security integration sector. SBA 7(a) loans can finance goodwill — the intangible value of an installed customer base, RMR contracts, and brand reputation — which often represents 60–80% of a commercial security integrator's purchase price. The key is demonstrating to your lender that the recurring monthly revenue is contractually documented, historically stable, and transferable to the new owner. A verified RMR schedule with contract terms, auto-renewal clauses, and historical attrition data is the single most important document in your loan package.
How do lenders treat recurring monthly revenue when underwriting an SBA acquisition loan for a security business?
SBA lenders underwriting security integration acquisitions treat verified RMR as high-quality recurring cash flow — similar to how commercial real estate lenders treat net operating income from leases. Lenders will typically apply a haircut of 5–15% to the RMR base to account for attrition risk, then annualize the adjusted figure as a component of projected debt service coverage. Contracts with auto-renewal clauses, multi-year terms, and diversified commercial clients (healthcare, multifamily, retail) are viewed more favorably than month-to-month or single-client-concentrated revenue streams.
What SBA loan amount can I realistically expect when buying a $2M–$3M surveillance integration business?
For a $2M–$3M purchase price, a qualified buyer can typically expect SBA 7(a) financing of $1.6M–$2.4M (80% of the purchase price), with the remaining 20% covered by a combination of buyer equity injection (10–15%) and a seller note on standby (5–10%). The SBA 7(a) maximum is $5M, so most lower middle market security integration acquisitions fall well within program limits. Your actual loan amount will depend on the business's verified EBITDA, debt service coverage ratio (lenders typically require 1.25x or higher), and collateral availability.
Are there SBA loan restrictions for security integration businesses that operate across multiple states with different licensing requirements?
The SBA itself does not restrict multi-state security businesses, but your lender will require evidence that all state contractor licenses, local alarm permits, and technician certifications are current and assignable to the new owner in every jurisdiction where the business operates. Some states — including California, Florida, and Texas — have strict alarm contractor licensing laws that require separate applications for ownership changes. Failing to identify and plan for these transfers before closing can create post-acquisition compliance gaps that violate SBA loan covenants and expose you to regulatory fines.
Can the seller note be used as part of my equity injection for an SBA loan on a security business acquisition?
Yes, under current SBA guidelines a seller note can count toward your equity injection requirement if it is placed on full standby — meaning no principal or interest payments are made to the seller for a minimum of 24 months after closing. The standby seller note must be documented in a promissory note, and the lender will require a signed standby agreement between buyer and seller. Typically, a seller note of 5–10% of the purchase price on 24-month standby, combined with 10% buyer cash equity, satisfies most SBA lenders' total equity injection requirement. Always confirm standby terms directly with your specific SBA lender before structuring the deal.
How long does it typically take to close an SBA loan for a surveillance and access control business acquisition?
From LOI signing to closing, most SBA-financed security integration acquisitions take 60–90 days. The timeline depends heavily on the complexity of due diligence — particularly verifying RMR contracts, auditing state licenses across multiple jurisdictions, and obtaining vendor agreement transfer confirmations from brands like Avigilon or Genetec. Working with a Preferred Lending Program (PLP) bank that can approve in-house shortens lender review by four to six weeks compared to standard SBA submission. Buyers who prepare a complete loan package — QoE report, RMR schedule, three years of tax returns, and borrower financial statement — before selecting a lender move fastest.
More Surveillance & Access Control Guides
More SBA Loan Guides
Start Finding Surveillance & Access Control Deals Today — Free to Join
Find SBA-eligible targets, score seller motivation, and get AI-written outreach in one platform.
Create your free accountNo credit card required