A buyer's deal team begins valuation work the same way for every agency: they identify the categories where the seller is exposed, then translate each exposure into a discount or a structural concession. The audit below is the seller-side mirror of that exercise. Read each vulnerability as if you were paying for it. The thresholds are the same ones buyers use; the remediation lead times are why a runway of three to five years is not a luxury.
The goal of the audit is not to fight buyers on every line — it is to enter the room with the categories already remediated, the documents already organized, and the residual exposures already priced in your own bridge. Each vulnerability you close pre-listing is a discount that does not get applied; each one you do not close is a number the buyer's memo writes down without your involvement.
Have these on a single drive before you score.
- Top-20 account schedule
- Revenue by client (LTM)
- Premium by carrier (LTM)
- Producer agreements
- Owner W-2 + P&L (3 yrs)
- E&O claims schedule
- AR aging
- AMS export
The six, ordered by remediation lead time.
Each card carries the warning threshold a buyer applies, the document required to verify remediation, and the lead time the fix actually takes. Lead time is the load-bearing column — the runway you need is the longest remediation on your list, not the average.
Owner dependency — the vacation test.
The single most damaging discount trigger. If a single producer (typically the owner) controls more than 25% of the top 20 accounts, buyers shift the deal toward earnout-heavy structure. Above 50%, the discount applied is material; above 75%, the seller note often becomes contingent on retention. The reverse test is simple: a one-month vacation should not cause revenue to dip or top clients to call asking for you personally.
Whale client concentration — the dilution remedy.
Any single client representing more than 15% of total revenue is a direct discount trigger. The math is asymmetric: a 15% client who departs post-close causes revenue to drop 15% but profit to drop 40–50% because overhead does not contract proportionally. The only effective remedy is dilution — growing the rest of the book to reduce the whale's share. You cannot drop a large client before a sale; you have to make them smaller relative to the whole.
Carrier concentration — the appetite exposure.
A single carrier exceeding 60% of total premium creates existential risk a buyer cannot price with confidence; even 40% triggers carrier-specific diligence. A change in that carrier's appetite, commission structure, or geographic moratorium can cripple revenue overnight. Diversification cannot be accelerated — you need 12–24 months of consistent new-business writing against secondary carriers to balance the mix.
Non-piracy & producer agreement gaps.
The absence of signed non-piracy (non-solicitation) agreements for key producers is a near-automatic deal condition. If producers can leave and legally solicit your clients the day after closing, the buyer has acquired a fragile asset. The agreement to seek is non-piracy — narrow, enforceable, and reasonable — not a broad non-compete. Crucially, this must be implemented 2–3 years before sale as a standard condition of employment; asking producers to sign during a sale process alerts them to the transaction and hands them leverage.
Financial commingling — the three-year hygiene window.
Buyers conducting diligence interpret personal expenses on the corporate card and family-member compensation above market rates as either (a) unknown true profitability or (b) value already extracted by the owner. Both reduce confidence in Normalized EBITDA. An elevated accounts-receivable balance signals the agency is floating premiums for slow-paying clients — a cash-flow and E&O risk. The remediation is mechanical: separate finances completely, write off uncollectable AR, and engage a CPA to produce a consistent normalization methodology across three years.
E&O claims history — the pattern concern.
A pattern of E&O claims signals systemic procedural failure, not bad luck. Buyers look at frequency (not just severity), whether the same underlying error repeats, and whether E&O premium trends suggest deteriorating risk in the carrier's view. The remediation if claims exist is documentary: for each claim, prepare a written narrative — what happened, why, and the specific procedural change that prevents recurrence. Buyers accept past mistakes; they do not accept evidence of an unchanged system. Two to three clean years post-remediation re-establishes the trend.
- "We'll fix the non-piracy gap during the process." Asking producers to sign during a sale alerts them to it and gives them leverage. Implement 2–3 years out, decoupled from any transaction conversation.
- "We'll drop the whale client before listing." You can't drop a large client pre-sale; you have to dilute them. Dropping triggers a revenue cliff that a buyer prices punitively.
- "We'll clean the financials in the year before." One year is a story; three years is a number. Buyers read trend lines, not single-period reconciliations.
- "We'll address E&O if asked." The narrative for each claim must exist on day one of the data room. Discovery in diligence is the unrecoverable failure mode.
Each remediated category is a discount that does not get applied.
The vulnerability audit is the highest-leverage hour an owner with runway can spend. On a $5M agency, each remediation that prevents a 5% discount is $250K of value preserved. The Milly Books Book Valuation Engine surfaces each category's exposure during the initial valuation so you can score yourself against the same six lines a buyer's deal team scores. Run your audit today, not the week before listing.
Terminology on this shelf
- Vulnerability Audit
- The systematic pre-sale review of the specific characteristics buyers use to justify valuation discounts. Six categories, threshold-driven.
- Whale Client
- A single client representing more than 15% of agency revenue; creates disproportionate concentration risk.
- Vacation Test
- The informal self-assessment of owner dependency: if the owner takes a full month away and revenue does not dip, dependency is substantially remediated.
- Non-Piracy Agreement
- A narrow, enforceable producer covenant prohibiting solicitation of agency clients after departure. Distinct from broad non-competes, which are increasingly difficult to enforce.
- Dilution
- The strategy of growing the overall book to reduce the proportional impact of any single large client or carrier.
- Turnkey Investment
- An agency structured to operate and retain clients without the daily presence of the selling owner; commands a premium multiple.