gp0569

Segment and ICP first

Security and alarm companies lose more money to fuzzy targeting than to competition. "Homes and businesses" is not an ICP; it is three separate businesses with different acquisition costs, different install labor, different churn curves, and different sales cycles. Choose one as your core and treat the others as opportunistic. The math forces the choice, because a residential account carrying a $45–$60 monthly recurring charge cannot absorb the same acquisition spend as a 40-location retail chain paying $80–$150 per site per month on a three-year commercial agreement.

Residential retrofit is the highest-volume, lowest-ticket segment. Typical monthly recurring revenue (RMR) runs $30–$70 depending on whether the plan includes video verification and cellular backup. The buying trigger is almost always an event: a move, a neighborhood break-in, a new baby, a package theft, a renovation. That means demand is bursty and geographically clustered, and it means you cannot manufacture urgency — you can only be present when the trigger fires. The competitive pressure here is brutal: self-install cloud cameras and doorbells from the platform giants have reset the consumer's price anchor to roughly $5–$15 per month for cloud storage. If you sell into this segment, you are not selling cameras. You are selling verified human response, professional install quality, and the insurance and permit paperwork the DIY buyer discovers they need only after a false alarm generates a municipal fine.

Small commercial — the independent restaurant, the dental practice, the two-bay auto shop, the self-storage facility, the contractor's yard — is the segment most alarm dealers underweight and where the unit economics are strongest. RMR typically lands $75–$250 per site. Churn is materially lower than residential because the system is tied to a business process, not a mood: opening and closing reports, employee access control, after-hours alarm accountability, insurance requirements, and in regulated verticals (cannabis, pharmacy, firearms retail, precious metals) an actual compliance mandate. A small-commercial account also tolerates a longer sales cycle — two to six weeks with a site walk — which rewards a real salesperson and punishes a call-center script.

Multi-site enterprise is a different company entirely. Deal cycles run four to twelve months, involve procurement and often IT security review, and require you to answer questions about your own device firmware, your SOC 2 posture, and your data-retention policy before anyone discusses cameras. The revenue is excellent and sticky — five- and six-figure annual contracts with 90%+ logo retention when you perform — but the sales motion needs named accounts, multi-threading across facilities, loss prevention, and IT, and a technical resource who can survive a security questionnaire. Do not attempt this segment with a residential sales team; the failure mode is a year of unpaid pilots.

The practical ICP filter for 2027 has four screens. First, regulatory or insurance pressure — does an outside party require monitoring? That converts a want into a budget line. Second, multi-location or multi-door complexity — the more doors, the more your integration and reporting layer beats a consumer app. Third, existing infrastructure — legacy wired panels and old analog cameras are an advantage for you, because retrofit and takeover work is exactly what the DIY entrants cannot do. Fourth, incident recency — a business that has had a break-in, a theft, or an insurance claim in the last 90 days closes several times faster than one that has not, so your data strategy should include monitoring police blotters, local news, and permit filings by ZIP code.

Write the ICP down as a disqualification list, not just a target list. The accounts to walk away from in 2027: single-camera residential buyers who found you through a price-comparison page, tenants without landlord authority to modify doors and wiring, anyone shopping three bids on a $40 monthly plan, and enterprises that want a free proof of concept across five sites with no signed commercial terms.

The motion that fits that segment

Each segment demands a structurally different go-to-market motion, and the most common strategic error is running one motion across all three.

For residential retrofit, the motion is local, trigger-driven, and channel-fed. Direct-response advertising works only when it is geographically tight and timed to an event, so budget concentrates on local search, neighborhood-level social, and referral. The single highest-leverage residential channel is the trade partner — real estate agents, moving companies, general contractors, electricians, locksmiths, and property managers who touch the customer at the exact moment the trigger fires. Build a referral program with a flat per-install fee and a co-branded leave-behind, and give partners a text-to-schedule link rather than a form. Expect a residential lead-to-install conversion of 20–35% when the lead comes from a trade referral and 5–12% when it comes from paid search. That gap is the entire argument for channel investment.

For small commercial, the motion is a named-territory field sale with a mandatory site walk. The rep's job is not to quote a system; it is to produce a written risk assessment that maps doors, blind spots, cash-handling points, after-hours exposure, and the customer's own insurance requirements. That document converts far better than a price sheet because it makes the buyer aware of gaps they did not know they had. Pair it with a same-visit proposal that shows monthly cost against a specific loss the owner already experienced. Cycle time: two to six weeks. Expect a rep carrying a defined territory to produce $2,500–$6,000 of new RMR per month once ramped, at roughly a 25–35% close rate on qualified site walks.

For multi-site enterprise, the motion is account-based with a solutions engineer attached from the first real meeting. Land with a single region or a single use case — a loss-prevention pilot across eight stores, or access control at one distribution center — with paid terms and written expansion criteria. The expansion is the business model. A 300-location retailer that lands at 8 sites and expands to 120 over two years is worth more than any residential cohort you will ever sell.

Across all three motions, the install appointment is the real conversion event, not the signature. Time-to-install is a growth metric: every week between sale and activation raises cancellation risk. Companies that hold residential install within five business days of sale routinely see pre-install cancellation under 5%; companies running three-week backlogs see it climb into the teens.

Unit economics and benchmarks

The financial physics of this industry are unusual, and a go-to-market plan that ignores them will look profitable on a spreadsheet and bankrupt in cash. Alarm companies pay acquisition costs up front — hardware, install labor, sales commission, permits — and recover them over years of monitoring revenue. That makes growth cash-negative by design, and it makes churn the variable that decides everything.

Start with the industry's native unit: RMR and the multiple of RMR it costs to create an account. Creation cost is the fully loaded sum of equipment, install labor, sales commission, marketing allocation, and back-office setup. For residential, that commonly lands somewhere between 20 and 35 times monthly RMR. At $50 RMR and a 28x creation cost, you have spent roughly $1,400 to open an account that returns $600 a year in revenue before service costs. With a monitoring gross margin of 65–80% after central-station and cellular costs, gross contribution is roughly $390–$480 per year. Simple payback is therefore about three years, and that is before any truck roll.

Now apply attrition. Residential attrition in this industry commonly runs 10–16% annually — call it 1% monthly at the good end. At 12% annual attrition, average account life is roughly eight years, so lifetime gross contribution against a $1,400 creation cost is genuinely attractive. At 20% attrition, average life falls to five years and the same account becomes marginal once you add service calls and overhead. The delta between a 10% and a 20% attrition rate is the difference between a business worth buying and a business burning cash to stand still.

That is why attrition, not install count, is the primary operating metric. Build the dashboard around it: gross attrition, net attrition after resales and takeovers, attrition by acquisition channel, and attrition by install technician. The channel cut is the most actionable number you will ever compute. Accounts from trade referrals and small-commercial field sales routinely churn at half the rate of accounts from discount-led direct response, which means two channels with identical CAC can have wildly different true costs. If you only measure cost per install, you will systematically over-fund your worst channel.

Concrete benchmarks to hold yourself to in 2027:

• Monthly RMR churn under 1.0% residential, under 0.6% small commercial. Above 1.5% monthly, stop all growth spend and fix service.
• Creation cost multiple of 22–30x for residential, 12–20x for small commercial where install labor is amortized over higher RMR.
• Monitoring gross margin 65–80%; if you are below 60%, your central-station or cellular contract is mispriced.
• False alarm rate below 0.5 dispatches per account per year. This is a revenue metric, not an operations metric — municipalities fine repeat offenders, and fines are the single most cited cancellation reason after price.
• First-visit install completion above 90%. Every return trip is $150–$300 of pure margin destruction.
• Net revenue retention above 100% on the commercial book, driven by added doors, cameras, and tier upgrades rather than price increases.
• Time to first value under 5 business days from sale to armed system.

Price increases are the tempting lever and the dangerous one. A 3–5% annual escalator written into the agreement and applied with notice is normal and largely tolerated. Surprise double-digit increases on a legacy base reliably spike cancellations and generate the regulatory complaints that attorneys general in several states have pursued against alarm sellers. If you need margin, upgrade the plan; do not silently reprice the old one.

Finally, model the balance sheet honestly. Growth consumes cash at roughly creation cost times net new accounts, and your revenue arrives in $50 increments. Most companies fund this with an RMR-backed credit facility priced against a multiple of qualifying RMR — and lenders discount your RMR based on your attrition history and contract quality. Clean, assignable, properly executed agreements with documented consent are worth a materially higher multiple than a messy book. Your sales paperwork discipline is, quite literally, an enterprise valuation input.

Common misfires

Selling on price against the platform giants. A $50 monitoring plan cannot win a spec-and-price comparison against a $10 cloud-storage subscription, and framing the conversation that way guarantees a loss. Reframe to what the low-cost entrant structurally will not do: dispatch verification, a licensed technician on site, takeover of an existing panel, permit filing, false-alarm management, business-hours access reporting, and a named human who answers when the system fails. If a prospect's only question is monthly price, they are not your buyer.

Long contracts used as a retention device. Multi-year residential agreements with automatic renewal and steep cancellation fees do retain revenue on paper, and they generate the complaint volume that draws state attorney general attention and, in some jurisdictions, statutory limits on renewal terms and cancellation windows. More practically, they mask service failure: a customer who wants out but cannot leave stops referring, leaves reviews, and cancels the day the term ends. Use reasonable terms, disclose them plainly, honor cancellations promptly, and earn renewal through performance.

Deceptive door-to-door and takeover tactics. The industry's most persistent reputational damage comes from summer door programs that imply a partnership with the incumbent alarm company or with local police. Beyond the ethical problem, these tactics produce the worst account book you can own: high early attrition, high chargeback rates, and lender discounts on the RMR. If you run door-to-door at all, script it for explicit identification, record consent, and audit a sample of every rep's sales weekly.

Ignoring false alarms until the municipality does it for you. Many jurisdictions impose escalating fines, permit requirements, and in some cases verified-response policies where police will not dispatch without independent confirmation of a crime. A dealer with a bad false-alarm profile in a verified-response city is selling a product that does not do the thing customers think they bought. Invest in video and audio verification, tune sensitivity at the 30-day mark, and treat every dispatch as a defect to root-cause.

Treating cybersecurity as marketing copy. Once you connect cameras, locks, and panels to a customer's network, you own an attack surface. There have been well-documented breaches of consumer camera platforms and credential-stuffing incidents across the connected-device market. The misfire is claiming security posture you have not built. Do the unglamorous work — unique per-device credentials, mandatory multi-factor on installer and customer accounts, signed firmware updates, an accurate data-retention policy — then talk about it.

Building for the enterprise segment with a residential org. Enterprise buyers will ask for a security questionnaire, a SOC 2 report or equivalent, an incident-response commitment, a data-processing agreement, and multi-site SLA language. If your answer is a brochure, you lose the deal after six months of unpaid work. Either staff that capability or do not sell there.

Growth spend that outruns install capacity. Marketing that generates more sales than technicians can install creates a backlog, a backlog creates pre-install cancellations, and pre-install cancellations burn full acquisition cost for zero RMR. Growth throttle should be indexed to available install-day capacity, not to lead volume.

Operating model and cadence

The operating model is where the playbook either compounds or leaks. Structure the company around four functions with explicit handoffs: demand, sales, install, and lifecycle. Each owns one number.

Demand owns qualified appointments by segment and channel, and it owns the attrition-adjusted cost per account — not cost per lead. Review channel mix monthly against 12-month attrition by source, and kill channels whose accounts churn out before payback regardless of how cheap the lead looked.

Sales owns close rate on completed site walks, average RMR per account, and paperwork quality. Add a hard gate: no account books without a signed agreement, verified contact info, a documented consent record, and a scheduled install date. This is the discipline your lender will price.

Install owns first-visit completion, time from sale to activation, and 30-day false-alarm rate per technician. Publish the technician-level false-alarm scoreboard. It is the fastest quality lever in the business because sensor placement and customer training at install determine most of the next two years of nuisance dispatches.

Lifecycle owns net revenue retention and save rate on cancellation requests. Staff a dedicated save function with real authority — tier downgrades, equipment swaps, a service visit, a temporary suspension for a customer moving — because the save team's marginal cost is trivial against a 25x creation cost. A save rate of 25–40% on inbound cancellation calls is achievable and is worth more than any marketing campaign you could fund with the same money.

Set the cadence explicitly. Weekly: sales pipeline against install capacity, backlog aging, false-alarm exceptions, and every cancellation request from the prior seven days read aloud with a root cause attached. Monthly: attrition by cohort and channel, creation-cost multiple by segment, gross margin on monitoring, and NRR on the commercial book. Quarterly: pricing and tier structure, partner economics, competitive review, and a security posture check covering firmware currency, credential hygiene, and vendor risk. Annually: renegotiate central-station and cellular contracts, and re-underwrite your channel portfolio from scratch.

Two standing rules keep the model honest. First, every cancellation gets a root cause code — price, false alarms, moved, service failure, sold to competitor, business closed — and the codes are reviewed monthly by the executive team, not delegated. Second, growth spend is gated on churn. If monthly RMR churn crosses 1.2%, marketing budget is redirected to service until it recovers. This feels punitive and is the single most valuable governance rule a security and alarm business can adopt, because in a subscription business built on multi-year payback, a leaky bucket does not get fixed by pouring faster.

The 2027 market rewards operators who understand that the product is not the panel, the cameras, or even the app. It is a promise that someone competent will respond, correctly, at 3 a.m. Every element of the go-to-market playbook — segment choice, channel mix, pricing tier, install standard, save motion — exists to make that promise credible enough to charge for and consistent enough to keep charging for. Companies that build the operating cadence around verified response and measured attrition will out-earn companies chasing install volume, even when the volume chaser posts better top-line growth for a quarter or two.

Related questions

Should we sell hardware outright or bundle it into the subscription?

Bundle for residential to remove the upfront barrier, and recover it through a longer, reasonably termed agreement. Sell or lease outright for commercial where buyers often prefer capitalizing equipment. Track it either way as creation cost against RMR, since the economics are identical regardless of accounting treatment.

How do we compete when the customer already owns a doorbell camera?

Do not replace it — integrate around it and sell what it cannot do: professional monitoring, verified dispatch, entry sensors, environmental detection, permit handling, and a technician who shows up. The installed consumer device is often a buying signal, not an objection; it proves the household already values security.

What is the fastest path into small-commercial from a residential base?

Mine your existing residential book for business owners, then run site walks with a written risk assessment. Your same technicians can install, your same central station monitors, and RMR roughly triples per account with lower churn. It is the highest-return expansion available to most dealers.

How much should we invest in AI video analytics in 2027?

Enough to cut false alarms and enable video verification, which are direct economic wins. Treat broader analytics as a paid tier for commercial accounts, not a residential default. Buy the capability from established platforms rather than building models in-house unless analytics is your actual product.

Do insurance partnerships actually produce volume?

They produce credibility and lower-churn accounts more reliably than raw volume. Carrier programs move slowly and require documented monitoring standards, but referred accounts arrive pre-qualified and stay longer. Treat insurance as a retention and trust channel, and fund immediate volume from trade partners and local search.

FAQ

What monthly recurring revenue should we target per account?

Residential typically supports $30–$70 depending on whether video verification, cellular backup, and environmental sensors are included. Small commercial commonly runs $75–$250 per site. Enterprise is priced per site or per door under an annual contract. Set the target by segment, never as a single company-wide number, because a blended average hides which segment is actually funding the business.

How do we know if our attrition is normal or dangerous?

Residential gross attrition around 10–13% annually is manageable; sustained rates above 16–18% mean the account book is shrinking faster than acquisition can profitably replace it. Cut it by channel and by acquisition month — a single bad quarter of discount-led selling can distort the whole number and disguise an otherwise healthy base.

Is door-to-door selling still viable in 2027?

It is viable and heavily scrutinized. Several states regulate door-to-door sales, cancellation rights, and automatic renewal terms, and deceptive takeover pitches have drawn enforcement action against alarm sellers. If you run it, require explicit company identification, record consent, honor cancellation windows without friction, and audit reps weekly. The accounts it produces churn faster, so price the channel accordingly.

How should we handle a customer whose city has verified response?

Sell video or audio verification as the core product, not an upsell. In verified-response jurisdictions, police will generally not dispatch on an unverified alarm signal, so a sensor-only system materially underdelivers. Be explicit about this in the sales conversation — misrepresenting dispatch behavior is the fastest route to a cancellation and a complaint.

What does a reasonable partner referral fee look like?

A flat per-installed-account fee, paid after the account survives an initial period, aligns incentives better than paying on signature. Paying on signature funds partners who send unqualified leads; paying after 60 or 90 days of active monitoring funds partners who send buyers who stay. Keep terms written, simple, and paid on time — trade partners judge you on payment reliability.

Do we need cybersecurity credentials to sell to businesses?

For small commercial, sound practices and a plain-language data policy usually suffice. For enterprise, expect a formal security questionnaire, questions about SOC 2 or equivalent, firmware update practices, and a data-processing agreement. If you intend to sell upmarket, start that work a year before you need it — it is not something you can assemble during a deal.

Sources

• https://www.securityindustry.org/ — Security Industry Association research and standards
• https://esaweb.org/ — Electronic Security Association, industry practices and training
• https://www.iii.org/ — Insurance Information Institute, home security and claims guidance
• https://www.ftc.gov/business-guidance — FTC business guidance on sales practices and negative-option marketing
• https://www.cisa.gov/ — CISA guidance on securing connected and IoT devices
• https://www.nist.gov/cybersecurity — NIST cybersecurity framework and IoT device guidance
• https://www.iacp.org/ — International Association of Chiefs of Police, alarm management resources
• https://www.consumer.ftc.gov/ — FTC consumer guidance on alarm sales and contracts
• https://www.sec.gov/edgar/search/ — SEC EDGAR filings for public alarm and monitoring companies

Related on PULSE

• [Inbound demand-capture GTM playbook in 2027](/knowledge/gp0511)
• [Sales-assisted PLG for mid-market in 2027](/knowledge/gp0510)
• [Reseller and VAR channel GTM playbook in 2027](/knowledge/gp0509)
• [International and geo-expansion GTM playbook in 2027](/knowledge/gp0508)
• [Vertical SaaS go-to-market playbook for healthcare in 2027](/knowledge/gp0507)