How the owners of well-run security companies turn decades of kept promises into proof.
The security industry is having a strong year on paper, and the paper is worth reading closely.
SDM Magazine’s 2026 SDM 100 report counted $740 million in combined recurring monthly revenue across its ranking of the hundred largest security dealers, the largest total in the report’s history, with 90 percent of those companies growing their recurring base. The same current runs through the broader market. In SDM’s 2026 Industry Forecast, among companies that grew their recurring revenue last year, the average increase was 23 percent.
Growth like that earns its headlines. But every one of those growth numbers is a net number. Underneath each one, two forces move in opposite directions: the accounts a company added, and the accounts it lost. The headline reports the difference and says nothing about the parts.
This piece is about the quieter force, and about a discipline we believe belongs in every commercial security company, whatever its plans: the attrition ledger.
The part owners already got right
Here is a survey finding worth pausing on. When SDM’s 2026 Industry Forecast asked security dealers and integrators to rank their top three business challenges, managing customer attrition sat near the bottom of the published list, ranked that high by roughly one company in ten. Finding and retaining employees led the list, ranked a top-three challenge by more than four in ten.
Some of that gap is earned confidence. Commercial security is a relationship business, and well-run local companies hold their customers the way few industries can: ten, twenty, thirty years on the books, systems replaced twice over, invoices going to the same company name the whole time. Retention is the strength this industry was built on.
The rarer asset is the written record. In most companies, the retention story lives where it was made: in the owner’s memory and the team’s relationships. Who has been on the books since the nineties. Which customer followed the company through three buildings. Why the one big account left, and what changed afterward. Knowledge that deep is the mark of a well-run company, and it deserves a document that can travel: something a banker, a partner, or a successor could read and trust without spending a decade in the passenger seat of the owner’s truck.
That document is the attrition ledger. It preserves what the owner and the team already know, and it turns that knowledge into something anyone can verify.
What is an attrition ledger?
An attrition ledger is a running, account-level record of every recurring customer that leaves the company and every one that arrives, kept month by month and never restarted.
The version we would put in front of any owner fits in a spreadsheet:
- Every account lost: the name, the recurring monthly amount, the start and end dates, and the reason, recorded in a handful of consistent categories.
- Every account gained: the same fields, plus where the account came from.
- A monthly summary line: accounts and recurring revenue at the start of the month, added during the month, lost during the month, and at the end.
That is the whole machine. Its value is not sophistication. It is consistency: the same definitions, applied the same way, every month, for years.
Two practical notes. First, if your billing platform already produces attrition or recurring revenue reports, you are most of the way there; the attrition ledger adds the reasons and the unbroken month-to-month record. Second, one column is worth reconstructing from history: tenure. Billing records hold account start dates going back decades, and a one-time pull of those dates produces the report many owners are proudest of, a count of customers past their tenth, twentieth, and thirtieth years. The loss reasons, on the other hand, can only be captured reliably from now on. That is the real argument for starting the ledger this month rather than someday.
Why every attrition number needs a definition
Ask three security companies for their attrition rate and you can get three honest numbers built three different ways. Before a ledger can prove anything, its definitions have to remain fixed.
Gross versus net
A company that loses twelve accounts and signs fourteen ends the year bigger, but “we grew” and “nobody left” are different stories. The ledger keeps both, because both are true and each answers a different question.
Counts versus dollars
Losing ten small accounts and losing one large one can look the same in an account count and very different in revenue. Track attrition both ways: by number of accounts, and by recurring dollars.
Reasons, in plain categories
A customer who sold their building is not the same loss as a customer who left over price, and neither is the same as a non-payment cancellation. Four or five categories, used consistently, are enough: moved or closed, price, service, competitor, and non-payment.
The arithmetic, in plain terms
A common convention is simple: recurring monthly revenue lost during the year, divided by recurring monthly revenue at the start of the year, gives a gross attrition rate. Net versions subtract what was recovered from the same base, such as a new owner taking over service at the same site. Any reasonable convention works. What matters is writing the definition at the top of the ledger and never changing it.
A caution about benchmarks
SDM cautions readers against using the aggregate tables in its own reports to benchmark an individual company. We would extend that caution to most industry numbers an owner will encounter, for a reason no published table can fix: definitions vary too much from company to company for an outside average to settle anything. That is the quiet advantage of the ledger. Your own number, defined once and tracked without interruption, is worth more to you than anyone else’s average.
What the ledger tells you while you run the company
The ledger earns its keep in the ordinary running of the company, which is exactly why it is credible whenever anyone else reads it.
- It gives early warnings. Loss reasons cluster before problems become obvious. Three service-related departures in a quarter is a conversation with the service manager now, not a year of quiet erosion later. A cluster of price departures after a rate adjustment tells you precisely how the base responded.
- It prices with evidence. Rate decisions in a recurring business are easier to make with last year’s response on paper, and the ledger is where that response is written down.
- It aims the save effort. Not every at-risk account justifies the same energy. Revenue-weighted attrition shows where retention work actually protects the company.
- It builds the team’s pride. A running count of customers past their tenth, twentieth, and thirtieth years is culture made visible. Few things say more about a company than how long its customers choose to stay.
The first report a serious reader asks for
I spend my days in the numbers of this industry, and I will admit a CFO’s bias: I trust what can be written down and checked.
Sooner or later, someone outside the company will read your numbers. A banker on a credit line. An insurer. A possible partner or buyer. Whoever it is, the recurring base will be the first thing they want to understand, and retention is how a recurring base proves its quality. We can say that plainly because we are one of those readers: when we study a security company, the retention record is where we start.
That is exactly why the ledger belongs in the owner’s hands first, long before any outside reader arrives. The company that keeps its own ledger walks into every conversation with its own numbers, on its own definitions, and tells its story on its own terms. We wrote last week about the five fundamentals that drive the value of a commercial security company, and retention you can prove is the one that verifies the other four.
Where we stand
We built Halo Service Partners on the conviction that in commercial security, trust is the product. The attrition ledger matters to us for exactly that reason: retention is trust made measurable, and few reports capture what an owner has actually built the way this one does.
When we sit down with an owner, the conversation finds its way to the accounts. Who has been on the books longest. Who followed the company from its first office. Who calls the front desk by first name. That is the company. The ledger is where it shows.
It is also why continuity is the center of how we partner. The name stays, the team stays, and the customer relationships stay, because those relationships are the asset the whole ledger describes. ProTech Security and Verified Security both run under their own names today, with the leaders and teams who built them still serving the customers who know them.
If you’re thinking about the future
If you own a commercial security company and you are thinking about its future, in any direction, we are glad to compare notes: on retention, on the market, and on what your next chapter could look like.