How do posts, rostering, wage floors, and bill rates shape the contract book?
Model profile
Numquants Cyber Security Financial Model
Managed security services provider run as one business: recurring MDR, SIEM and compliance services priced per endpoint and per customer, penetration testing and incident response priced by the consultant day, with the 24x7 SOC, the sales capacity and the funding it takes to get there all modelled rather than assumed.
Decision scope
Questions this model helps you examine
What workforce, recurring revenue, capital programme, and financing does the business require?
How do attrition, wage settlements, and contract renewal downside cases affect returns?
Model capabilities
What this model includes
The profile below is generated from the same catalogue and workspace definitions used by the application.
- Customer segments with endpoints, expansion, logo churn, price position and billing terms
- Recurring services priced per endpoint or per customer with attach rates
- Licence resale reported net as an agent under IFRS 15, gross billing shown as a memo
- SOC analysts sized from workload minutes per monitored unit, improving with automation
- A 24x7 staffing floor, with a partner night shift until the in-house SOC is built
- Analyst attrition priced through recruitment and ramp
- Consulting bench sized to demand at a target utilisation
- Account executives who carry quota and ramp; bookings lost to sales capacity reported
- ARR bridge, net and gross revenue retention, CAC payback, lifetime value and Rule of 40
- Deferred revenue from annual invoicing and per-segment collection days
- IFRS-style three statements with reconciled direct and indirect cash flow
- Staged equity, growth debt and a receivables revolver with liquidity and DSCR covenants
- DCF on a CAPM cost of capital, cross-checked against MSSP and MDR multiples
- LP/GP distribution waterfall with a preferred return
- Sector benchmark comparison against published MSSP, MDR and professional services bands
- Tornado, named scenarios, goal seek, stress thresholds and a correlated Monte Carlo
Build the case
Inputs and workspaces
- AssumptionsEscalation, the SOC, consulting, sales capacity, working capital, funding, tax and valuation
- Customers and servicesCustomer segments, managed security services and professional services engagements
- People, overheads and capitalLeadership and central roles, operating expenses and capital expenditure
- AnalyticsScenario selector, sensitivity shock and Monte Carlo settings
Review the result
Outputs and analysis
- Project NPVUSD
- Project IRRAnnual
- Equity IRRAt the exit multiple
- Equity multipleMOIC
- Peak funding requirementBefore financing
- Funding headroomCommitted less peak
- Cash troughLowest month-end
- EBITDA breakevenMonth
- 20 additional metrics in the workspace
- Financial statementsDetailed schedules
- Operating schedules, valuation and riskDetailed schedules
Designed for review
Who this model is for
- Security company owners and operators
- Operations and compliance managers
- Financial advisers
- Investors and lenders
Governed evidence
The review trail stays with the result.
Each completed calculation preserves the model version, saved inputs, reporting-currency snapshot, immutable run, and result fingerprint used for its reports.
- Version-controlled calculation logic
- Saved assumptions and scenarios
- Immutable calculation runs
- Reporting context preserved in exports
Ready to explore the case?