u/canhelp

Semantic IDs for vulnerable code: finding 100× more cross-project clones than VUDDY

Semantic IDs for vulnerability detection. The recsys community has spent the last three years building out the TIGER substrate (Rajput et al., 2023): train a Residual-Quantized VAE on top of an item encoder, get a 3-integer discrete code per item, retrieve by hash bucket instead of by nearest neighbor. I applied that substrate to C/C++ vulnerability clone detection.

The result: on a 5000-function CVE registry, my system (SecSid) surfaces 112 non-fork cross-project vulnerability clones. VUDDY (Kim et al., S&P 2017), the canonical token-hash baseline in this corner of the security literature, finds 1.

How it works:

🔬 Frozen UniXcoder embeds each C/C++ function into a 768-d vector.
🔬 A 3-level Residual-Quantized VAE quantizes it through learned codebooks (128 × 128 × 512).
🔬 Output: a Semantic ID [c1, c2, c3]. c1 = broad family, c2 = specific vector, c3 = exact variant.
🔬 Hashable, prefix-comparable, O(1) lookup at any level. Functions sharing a SID prefix land in the same bucket.

The 111 clones VUDDY misses share the same abstract vulnerability shape across unrelated projects, but with different identifiers, types, and surface code. The codebook buckets on shape; the token hash sees them as 111 different functions.

A few examples from the registry:

• mysql-server + stunnel + weechat at SID [58, 10, 195]: "SSL credentials transmitted before TLS validation." Database client, TLS proxy, IRC client. Same bug, three domains.
• curl + evolution-ews + mysql-server at [54, 119, 242]: "SSL cert validation incomplete."
• libgcrypt + libssh2 + openssl at [110, 10, 407]: crypto state path. CWE-200, CWE-787.

First application of TIGER-style Semantic IDs to security clone detection that I can find. Mechanism transfer, not a new mechanism.

Full writeup :https://shrikar.com/writing/semantic-ids-for-vulnerable-code

reddit.com
u/canhelp — 5 days ago

30,000 insurance agency owners are retiring with no succession plan. Heres why I think this is the best acquisition opportunity nobody talks about.

Tenth post in this series. Already covered pest control, HVAC, restoration, home care, landscaping, roofing, septic, commercial cleaning, and car wash. Insurance is a completely different thing from all of those and honestly I wish I had looked at it earlier.

No trucks. No equipment to maintain. No worrying about weather. Your entire business is client relationships and the commissions that come with them. And those commissions renew automatically every single year.

Thats the part that blew my mind when I started digging into this. When a client buys a policy thru your agency, the carrier pays you a commission. When that client renews next year you get paid again. And the year after that. Best agencies are keeping 95% of their clients year over year which means basically all of last years revenue is already locked in before January even starts. Ive never seen retention numbers like that in any other industry.

Market size is $261.7B per IBISWorld. But the number that matters more is this one: OPTIS Partners estimates theres somewhere between 25,000 and 30,000 independent agencies under $1.25M in revenue where the owner is getting old and has no plan for who takes over. 89% of new insurance agents quit within the first 3 years so theres nobody coming up behind them. Something like 400K people in insurance are expected to retire by 2026 and the pipeline just isnt there to replace them.

So you have thousands of profitable little agencies with loyal client books that need a buyer. Thats your acquisition pipeline for the next decade.

what buyers are paying

Multiples are pretty straightforward. Small shops under $1.25M revenue go for 2.8-3.2x SDE. The sweet spot for SBA buyers is $1.25M-$5M revenue at 3.2-3.8x SDE. Once you get to $5-10M the PE platforms start looking at you and multiples push to 3.5-4.1x. At $25M+ revenue the big strategic buyers like Gallagher and Brown & Brown are paying 7-9x EBITDA.

Median SDE is around $195K. Median sale price around $650K. So this is very accessible for SBA financing compared to something like a car wash where your looking at $2M+ all in.

The arbitrage between entry multiples and exit multiples is real but maybe not as dramatic as something like landscaping where you buy at 3x and platforms exit at 11-14x. In insurance the gap is more like buy at 3.5x SDE, build to $8M+ revenue, exit at 7-9x EBITDA. Still very good.

PE activity

695 deals happened in 2025 per OPTIS Partners. Thats actually down 12% from 787 the year before. PE backed buyers controlled about 73% of everything. The pool of active buyers is shrinking too, only 95 unique buyers in 2025 vs 104 the prior year.

Hub International did 49 deals. Inszone did 45. BroadStreet led among PE buyers. Gallagher made some big strategic moves acquiring Woodruff Sawyer and AssuredPartners. Brown & Brown grabbed Accession Risk Management.

Even with deal volume declining the OPTIS guys said they expect "more large deals and recapitalizations in 2026 as the chase for scale continues." So the demand side isnt going away, buyers are just getting pickier on valuation.

the thing most people miss about revenue quality

Not all insurance agency revenue is equal and this matters alot for valuation.

Commission revenue on P&C runs 15-25% of premium written. On employee benefits its only 3-6%. But heres whats interesting, theres a shift happening toward fee-based advisory. Instead of just placing a health plan and collecting 4% commission, agencies are charging clients $500-$1K per month as a consulting retainer. Those fees have 40-50% net margins vs 15-20% on traditional commissions.

Agencies that have moved 20-25% of their income to fee-based models are getting a 0.5x-1.0x premium on their multiple. So if you buy a commission-heavy P&C shop at 3.0x and convert a chunk of the benefits business to fee-based advisory, youve potentially added a full turn to your exit multiple just from changing the revenue model. Thats real value creation without needing to grow revenue at all.

The other growth engine is cyber insurance. Ransomware events up 41% per the FBI. Cyber premiums growing 27% CAGR. If the agency your buying doesnt offer cyber risk consulting to their SMB clients, thats $2-5K per client in new revenue sitting on the table.

what to actually check before you buy

The biggest risk in buying an insurance agency is that the owner IS the agency. If they have all the client relationships, do all the selling, and theres no other producer on staff, youre going to lose 20-40% of the book within 18 months of close. Ive seen this happen and its brutal.

So the first thing I'd look at is producer depth. Are there non-owner producers generating at least 40% of new business? Do they have non-solicitation agreements? Can you verify who actually owns the client relationships contractually?

Second thing: carrier appointments. These are literally licenses to sell for specific insurance companies and they dont always transfer automatically in an acquisition. If a carrier decides not to approve the transfer you could lose access to a big chunk of your revenue. Check this early in diligence, not after the LOI.

Client retention: 90% is the industry standard. Under 85% means something is wrong. Over 95% is premium and you should pay up for it.

Client concentration: I'd want no single client over 10% of revenue and the top 5 combined under 30%. One Fortune 500 account leaving your benefits book can crater the business overnight.

Tech stack matters more then I expected. Agencies on modern systems like AMS360 or Applied Epic with automated workflows are running 15-20% lower operating costs then shops still doing everything manually. If you buy a legacy system shop budget $50-150K for modernization.

the labor picture is actually good

This is maybe the nicest surprise vs everything else Ive covered. Turnover is only 14%. Compare that to commercial cleaning (75-200%), home care (79%), landscaping (31%). Insurance people tend to stay once they get established.

Average agent makes $55-65K. Account executives $110-140K. Not cheap but manageable and way more stable then trying to keep $17/hr caregivers from leaving for Costco.

The catch is that recruiting new producers is expensive and slow. $75-125K all in when you include training costs and the ramp period. And 89% of new agents dont make it past 3 years. So if you buy an agency with experienced producers already in place, thats worth a premium because replacing them is painful.

where I'd look

Dallas-Fort Worth is probably the strongest market right now. No state income tax, $8.2B in P&C premium volume, cyber adoption is high. Phoenix and Atlanta are strong too. Charlotte and Raleigh are interesting because competition is lower and both metros are growing fast.

I'd avoid San Francisco (valuations inflated 20-30%, operating costs are insane), NYC (no license reciprocity, compliance costs 40% higher then national avg), and LA (market saturation, wildfires destroying carrier relationships, agent wages running $75-95K vs $55-65K everywhere else).

the math

$1.5M revenue shop, $150K SDE, buy at 3.5x for $525K. SBA 7(a) at 90% LTV so your out of pocket about $52K. After debt service your taking home around $85K year one plus whatever salary you set. Grow organically 7-10% per year which is below the best practices benchmark of 10.7%. By year 3 cash flow is $140K. Exit at 4.0x SDE in year 5 for around $820K. Call it a 28-29% IRR.

Honestly not the highest IRR Ive modeled across these industries but the risk is way lower. No weather risk, no material cost volatility, no 79% turnover, no $150K vacuum trucks to replace. The cash flows are just incredibly predictable.

risks I'd flag

P&C rates are softening right now. Down 8-10% on preferred risks per Aon. That directly compresses your commission revenue unless you offset with volume growth or specialty lines. Combined ratios are trending toward 99% which means carriers are barely profitable and could start tightening appointments or cutting contingent commissions.

Climate CAT losses are exceeding $100B a year now which stresses carrier relationships especially in Florida and coastal markets. If your agency is in a CAT-prone area, check how your carrier partners are handling it because some are pulling out of entire states.

And the talent pipeline is genuinely thin. 50% of the workforce approaching retirement, 89% new agent attrition. This is both a risk and an opportunity, its what creates the acquisition pipeline but it also means staffing the agency post-acquisition takes real investment.

bottom line

Insurance agencies have the stickiest recurring revenue model in small business. Period. 90-95% client retention, 26% EBITDA for top quartile, no trucks or equipment, low turnover. The 30,000+ agencies needing perpetuation means the acquisition pipeline is deep and will last a decade. Entry multiples are fair at 3.2-3.8x SDE. The value creation play is converting to fee-based advisory and adding cyber lines. PE controls 73% of deals proving institutional demand for the asset class.

If you can get past the fact that selling insurance isnt as sexy as owning a car wash or a pest control route, the risk-adjusted returns are probably the best Ive seen across ten industries.

reddit.com
u/canhelp — 6 days ago

How much is an insurance agency actually worth in 2026? I compiled every multiple, margin, and deal I could find. The recurring revenue math is insane.

Tenth industry deep dive Ive posted here. Already covered pest control, HVAC, restoration, home care, landscaping, roofing, septic, commercial cleaning, and car wash. Insurance agencies are a completely different animal from everything else Ive researched. No trucks, no equipment, no weather dependency. This is a knowledge business with the stickiest recurring revenue model Ive seen anywhere. Once a client renews their policy, that commission hits your account every year without you lifting a finger.

Heres everything I found.

Why insurance agency economics are so compelling

$261.7 billion market per IBISWorld in 2025. Growing at roughly 4% CAGR. But the market size isnt the story. The story is the revenue model.

Insurance agency revenue is almost entirely recurring. When a client buys a policy, the agency earns a commission. When that policy renews the next year (and the next, and the next), the agency earns a renewal commission automatically. Best-in-class agencies maintain 95%+ client retention rates. That means 95% of last years revenue walks in the door on January 1 without a single new sale.

Compare that to roofing (zero recurring), restoration (zero recurring), or even pest control (70-85% recurring). Insurance agencies have the highest revenue predictability of any industry Ive studied.

Top quartile operators per the Big I/Reagan 2025 Best Practices Study are hitting 26.1% EBITDA margins and 10.7% organic growth. Revenue per producer at the best agencies exceeds $750K. This isnt a low-margin grind. If you buy the right agency with the right book of business, its a cash machine.

Two revenue models you need to understand

Commission-based (traditional): You sell a policy, the carrier pays you 15-25% of the premium on commercial P&C, 15-20% on personal lines, and 3-6% on employee benefits. Renewals happen automatically. Top agencies also earn contingent commissions (bonuses from carriers for hitting volume and loss ratio targets) worth 5-10% of revenue.

Fee-based advisory (the growth play): DOL fiduciary rules are pushing the industry toward fee-based consulting, especially in employee benefits. Instead of earning 3-6% commissions on health plans, agencies charge $500-$1K/month retainers for benefits consulting. These fees carry 40-50% net margins vs 15-20% for commissions, and theyre stickier because clients are paying for advice, not just policy placement.

Agencies that have shifted 20-25% of revenue to fee-based models command a 0.5x-1.0x multiple premium. This is the value creation lever PE platforms are exploiting.

What buyers are actually paying

Median SDE is about $195K and median sale price is $650K. The spread between where individual buyers enter (3.0-3.5x SDE) and where PE platforms exit (7-9x EBITDA) is massive.

PE dominates this space

695 deals in 2025 per OPTIS Partners, down 12% from 787 in 2024. But PE-backed buyers still controlled 73% of all acquisitions. The buyer pool is narrowing tho. Only 95 unique buyers in 2025, down 9% from 104 in 2024.

The most active acquirers in 2025:

  • BroadStreet Partners: led all buyers, focused on regional P&C consolidation
  • World Insurance Associates and Keystone Agency Partners also accelerated deal pace

Major strategic moves: Arthur J. Gallagher acquired Woodruff Sawyer (San Francisco-based) and AssuredPartners in 2025. Brown & Brown bought Accession Risk Management. The Baldwin Group acquired CAC Group. These are the strategic buyers who will pay 7.5-9x EBITDA for your platform when you exit.

The 30,000 agency retirement wave

This is the structural opportunity that makes insurance different from every other industry Ive covered. OPTIS Partners estimates 25,000-30,000 independent agencies under $1.25M revenue have no perpetuation plan. The owners are aging out with no successor.

89% of new insurance agents quit within 3 years. About 50% of the current workforce is expected to retire by 2028. 400,000 insurance retirements projected by 2026. The pipeline of new talent cant keep up.

That means thousands of profitable, cash-flowing agencies with sticky client books need buyers over the next 5-10 years. For SBA buyers willing to learn the industry, this is a deep and durable acquisition pipeline at fair multiples.

Cyber insurance is the growth engine

Ransomware events are up 41% YoY per the FBI. Cyber insurance is growing at 27% CAGR through 2026. 58% of insurers are already using AI in cyber underwriting.

For acquirers, this matters because agencies with cyber/specialty lines exposure (25%+ of revenue) are growing at 5.92% CAGR vs slower growth in traditional P&C. Specialty lines command premium multiples and higher margins. If your buying a traditional P&C agency, the upside play is layering in cyber risk consulting for SMB clients at $2-5K per engagement.

6 things I'd verify before writing an LOI

The labor advantage over home services

Insurance has the best labor economics of anything Ive covered. Average agent wage is $55-65K, account executives earn $110-140K, but turnover is only 14%. Compare that to commercial cleaning (75-200%), home care (75-79%), or landscaping (31%).

The catch: the talent pipeline is thin. 89% of new agents wash out within 3 years and 50% of the workforce is approaching retirement. But this actually creates a competitive advantage for agencies that invest in mentorship, training budgets ($3-5K/year per agent), and certification sponsorship (CPCU, CIC, CRM). Agencies with structured mentorship programs reduce turnover 25-35%.

Where to buy

Top markets based on P&C premium volume, population growth, and commercial density:

  1. Phoenix (strong population influx, specialty lines demand, medium competition)
  2. Charlotte (medium competition, growing, corporate relocations)

Markets to approach with caution: San Francisco (valuations inflated 20-30% above national averages, high operating costs), NYC (no reciprocity for producer licenses, compliance costs 40%+ higher, intense PE saturation), LA (market saturation, wildfire exposure straining carrier relationships, agent wages $75-95K vs $55-65K national).

The SBA math

$1.5M revenue agency, $150K SDE, buy at 3.5x for $525K. SBA 7(a) at 90% LTV means $52.5K out of pocket. Year 1 cash flow around $85K after debt service. Grow organically 7-10% per year thru producer hires and fee-based advisory conversion. By year 3 your at $140K cash flow. Exit at 4.0x SDE in year 5 for $820K. Thats roughly a 28.5% IRR.

The PE platform math is bigger. $7M revenue, buy at 3.5x SDE ($2.45M). Cross-sell cyber and specialty lines for 15% revenue lift. Consolidate tech stack for 200 bps EBITDA margin expansion. Exit at 5.5x EBITDA in year 5 for $5.2M. Thats a 42% IRR.

The honest risk assessment

  • AI governance regulations expanding across nearly half of US states adding compliance complexity
  • Rate softening in P&C could pressure commission revenue for agencies without fee-based diversification

But the fundamentals are hard to argue with: 90%+ client retention, 26% EBITDA for best-in-class, 73% PE deal share proving institutional demand, 30,000+ agencies needing perpetuation over the next decade, and cyber/specialty lines growing 27% CAGR creating new revenue streams. This is the most recession-resistant recurring revenue model in small business.

TLDR

$261.7B market with the stickiest recurring revenue in small business (90-95% client retention). Buy $1.25M-$5M agencies at 3.2-3.8x SDE, add fee-based advisory for 0.5-1.0x multiple expansion, layer in cyber risk consulting for SMB clients, grow organically 7-10%. Exit at 4-4.5x SDE to PE platforms or hold for cash flow. 695 deals in 2025 with PE controlling 73%. 30,000+ sub-$1.25M independents retiring with no succession plan creating a decade-long acquisition pipeline. Biggest risk is P&C rate softening compressing commissions. Best play: agencies with diversified revenue mix including fee-based advisory and specialty/cyber lines.

This is the tenth deep dive Ive posted here. Insurance is the industry with the highest revenue predictability and lowest operational complexity of anything Ive covered. No trucks, no equipment, no weather dependency, no 79% turnover. Just sticky client relationships and recurring commissions. If theres interest I'll keep posting these.

What industries are you all looking at? Anyone here own or looking to buy an insurance agency?

reddit.com
u/canhelp — 6 days ago
▲ 213 r/FounderHelp+1 crossposts

Ninth industry deep dive Ive posted here. Already covered pest control, HVAC, restoration, home care, landscaping, roofing, septic, and commercial cleaning. Car wash is the one that gets the most attention from first-time buyers and for good reason. The membership model has fundamentally changed the economics of this business in the last 5-10 years. But oversaturation in Sun Belt corridors is a real risk that most people underestimate.

Heres everything I found.

Why car washes arent what they used to be

$15 billion US market per the International Carwash Association and Grand View Research ($15.28B in 2025). About 60,000+ sites nationwide. Express exterior washes now account for 42% of the market and thats where all the PE money and new construction is going.

The transformation happened because of unlimited monthly memberships. Instead of paying $12-18 per wash and coming whenever you feel like it, customers now pay $30-$45/month for unlimited washes. Top-performing express sites convert 40-60% of wash volume to monthly members. At $35/month average with 1,500+ active members, thats $52,500/month in pure recurring revenue before a single walk-up customer pays for a wash.

That recurring revenue base is what turned car washes from weather-dependent cyclical businesses into subscription-based cash flow machines. Its also why PE has poured billions into the space.

The other hidden asset: real estate. Express car washes sit on high-visibility, high-traffic corner lots (typically 0.75-1.5 acres) on major retail corridors. Many sites sit on parcels worth $1.5-5M+ in growing metros. Owners benefit from both operating income AND underlying land appreciation.

What buyers are actually paying

Multiples are higher then most home services because of the recurring revenue and real estate component:

  • Under $500K revenue: 3.0x-3.75x SDE (self-serve/in-bay automatic, limited membership)
  • $500K-$1.5M revenue: 3.75x-4.5x SDE (single express site)
  • $1.5M-$5M revenue: 4.5x-6.0x SDE (high-performing single or 2-3 locations)
  • $5M-$20M revenue: 6.0x-9.0x EBITDA (multi-site with 4-10 locations)
  • PE platforms (10+ sites): 10x-14x EBITDA

Median SDE is about $285K and median sale price is $1.2M+. The spread between single-site multiples (3.5-5x SDE) and platform exits (10-14x EBITDA) is the widest of any industry Ive covered.

The margin profile is exceptional

This is where car washes really shine:

  • Express exterior (single wash): $10-$18/car, 50-65% gross margin
  • Unlimited membership: $30-$45/month, 70-85% gross margin
  • Full-service wash: $25-$50, 25-40% gross margin
  • Detail services: $75-$300, 45-60% gross margin
  • Self-serve bay: $5-$10/use, 60-75% gross margin

Industry EBITDA margins run 45-55% for express tunnels with top quartile hitting 55-67%. Chemical cost per car is only $0.60-$0.90. Compare that to commercial cleaning (12-18% EBITDA) or roofing (6.4% avg EBITDA). Car washes are in a completely different league on profitability.

The variable cost per car is incredibly low: $0.75-$1.50 for chemicals and water. Once you cover fixed costs (lease, equipment, insurance, utilities, labor at $45-85K/month), every additional car wash is almost pure margin.

PE is all over this space

Car wash M&A has been one of the hottest PE sectors for years. Some of the major platforms:

  • Mister Car Wash: 500+ locations, the largest operator in North America. Went public in 2021 (MCW), originally backed by Leonard Green
  • Zips Car Wash: 270+ locations across 20+ states, backed by Atlantic Street Capital which invested an additional $70M in 2024 to support growth
  • Whistle Express (formerly Express Wash Operations): acquired Driven Brands' entire US car wash business for $385M in early 2025, now one of the largest platforms with 400+ locations
  • WhiteWater Express: 100+ locations across 6 states, backed by Freeman Spogli, focused on Sun Belt express expansion

The consolidation math is the same as every other industry: buy individual sites at 4-5x SDE, build a multi-site portfolio with centralized management, unified membership across locations, and bulk chemical purchasing, then exit the platform at 10-14x EBITDA.

The #1 metric that drives valuation

Membership penetration and churn. Full stop.

A site doing 100K annual washes with 15% from members is a completely different asset then one with 50% member penetration. The latter commands a 1.0x-2.0x higher multiple. Best-in-class express washes maintain 3-5% monthly churn and 1,500+ active members per site.

When evaluating a car wash acquisition, the first thing I'd ask for is the full membership dashboard: total active members, monthly sign-ups vs cancellations, average revenue per member, churn rate, and member tenure. If the owner cant produce this data cleanly, thats a red flag.

Membership fatigue is real tho. As more competitors offer unlimited plans, consumers face subscription saturation. Some markets are seeing price wars with memberships dropping to $19.99/month to poach customers. That race to the bottom compresses margins while maintaining the same fixed costs.

The oversaturation risk nobody wants to talk about

This is the biggest risk in car wash acquisitions right now. The express car wash construction boom has added thousands of new tunnels since 2020. Some submarkets, particularly Sun Belt growth corridors, are approaching saturation with 5-7 express washes within a 3-mile radius competing for the same customer base.

Wash counts at established sites in oversaturated markets have declined 10-20%. Before you acquire, map every competitor within a 3-mile radius AND check local permitting records for planned new builds. A site that was the only express option in its trade area may face 2-3 new competitors within 24 months.

Markets with zoning restrictions on new car wash construction offer the strongest competitive moats. The permit itself becomes a valuable intangible asset.

5 things I'd verify before writing an LOI

  1. Membership penetration and churn. Total active members, monthly sign-ups vs cancellations, churn rate. Best-in-class: 1,500+ active members, 3-5% monthly churn. Below 25% membership penetration means theres upside but also means the current operator hasnt figured out how to convert customers. Above 50% means the recurring revenue base is locked in.
  2. Real estate position. Owned vs leased? Current appraised land value? For leases, how many years remain including options and whats the annual escalation? Owned real estate on a high-traffic corridor provides a valuation floor. If the business underperforms, the land itself may be worth 40-60% of purchase price. Leased sites need at minimum 15 years remaining to justify tunnel equipment investment.
  3. Equipment age and throughput. Express tunnel equipment has 10-15 year useful life. A 120-foot tunnel processing 100 cars/hour is a fundamentally different business then a 150-foot tunnel doing 200 cars/hour. Deferred maintenance or outdated equipment can require $500K-$1M in near-term capex. Subtract that from your valuation.
  4. Weather sensitivity and seasonality. Get monthly wash count data for at least 3 full years. Northern markets see 40-50% revenue swings between summer and winter. Membership programs mitigate this because members pay whether they wash or not. Thats why high membership penetration is so valuable for underwriting.
  5. Competitive moat and market saturation. Map every competitor within 3 miles. Check permitting records for new builds. A site in a zoning-restricted area where no new car washes can be built has a genuine moat. A site on a corridor with 3 new tunnels under construction has a serious problem.

Where to buy

Top markets based on year-round wash weather, population growth, and vehicle density:

  1. Phoenix (year-round, massive growth, dust demand)
  2. Dallas-Fort Worth (huge vehicle density, suburban sprawl, membership uptake)
  3. Tampa-St. Pete (year-round, salt air corrosion drives wash frequency)
  4. Nashville (growing suburban market, strong membership adoption, less competition)
  5. Raleigh-Durham (tech demographics skew young and suburban, prime car wash customers)

Markets to approach with caution: Houston I-10/I-45 corridor (oversaturated with 6-8 express tunnels per submarket, price wars below $20/month memberships), South Florida Miami-Dade (intense competition, $3M+ per acre real estate, hurricane insurance headwinds), Las Vegas Eastern corridor (water restrictions limiting expansion, PE-backed competitor saturation).

The labor advantage

Car washes have one of the best labor stories of any industry Ive covered. Express tunnel model cuts labor to 3-5 employees per site. License plate recognition, kiosks, and RFID eliminate manual tasks. Average wage runs about $33K for tunnel attendants, $45-60K for site managers.

Turnover is 60-80% which is high but the express model means your less dependent on any individual employee compared to trades like HVAC or roofing. Automation is the moat here.

The SBA math

Single express site, $1.2M revenue, 35% SDE margin ($420K SDE). Buy at 5.0x SDE for $2.1M. SBA 7(a) at 90% LTV means $210K out of pocket. Year 1 cash flow around $185K after debt service. Grow membership 20% per year thru LPR upselling and first-month-free promotions. By year 3 your at $310K cash flow. Exit at 5.5x SDE to a PE platform in year 5 for $4.5M. Thats roughly a 38.5% IRR.

The conversion play is even more interesting. Buy a legacy full-service wash at 3.0x ($1.5M), invest $800K to convert to express tunnel with membership program. Revenue goes from $600K full-service to $1.6M express by year 3. Exit at 5.0x SDE for $3.8M. Thats a 45% IRR.

The honest risk assessment

  • Oversaturation in Sun Belt corridors is real and wash counts at established sites in saturated markets have dropped 10-20%
  • Membership fatigue as competitors engage in price wars dropping plans to $19.99/month
  • Capital intensive: $3-6M for new builds, $500K-$1M for equipment refreshes every 10-12 years
  • Weather dependency remains real especially in northern markets (40-50% revenue swings)
  • Water restrictions in drought-prone Western markets can limit operations
  • Rising utility and insurance costs (15-25% increases since 2022)

But the tailwinds are strong: subscription economy adoption is structural, 290M+ registered vehicles with record 12.6 year median age, environmental regulations pushing consumers to professional washes that reclaim 80-90% of water, and the top 10 operators control less then 15% of 60,000+ sites leaving massive room for consolidation.

TLDR

$15B market, 60K+ sites, express exterior with unlimited membership is the play. Buy single sites at 4-5x SDE with owned real estate and under 30% membership penetration (upside to grow to 50%+). Grow membership aggressively thru LPR upselling and promotions. Exit at 5.5-6x SDE to PE platforms or hold for cash flow. Express margins are 45-67% EBITDA with chemical costs under $1/car. Biggest risks are oversaturation in Sun Belt corridors and membership price wars. Best markets are growing suburban metros with limited competition and zoning restrictions on new builds.

This is the ninth deep dive Ive posted here. Car wash has the highest margins and strongest recurring revenue model of any industry Ive covered but the capital intensity and oversaturation risk make site selection the most important decision. If theres interest I'll keep posting these.

What industries are you all looking at? Anyone here own or looking to buy a car wash?

reddit.com
u/Money-Ranger-6520 — 23 days ago