Bootstrapping a B2B SaaS to a $615M exit over 15 years

Executive overview

Most founders underestimate how long patient, customer-first execution takes to compound. One bootstrapped B2B security SaaS company took 15 years to reach a $615M exit — three private equity deals, each returning more equity to the founders.

The core levers were high gross margins, negative churn, and a pricing philosophy called short-term generous, long-term greedy: give customers the product cheaply now, knowing loyalty and expansion follow.

The biggest exit multiplier isn't growth rate — it's the combination of gross margin, net retention, and growth working together like reels on a slot machine.

The path to exit

• Founded 2003 on $350K angel funding; first revenue was $9,920 that year
• Reached profitability and $1M ARR in 2007 — four years of grinding with no outside income
• Sold majority stake to private equity in 2017 at 7x ARR; retained equity for two further exits
• Final exit in 2022 at 14x ARR, totalling $615M; founder personally received ~$88M across three payouts
• Early pricing was subscription out of necessity — couldn't close large one-time licence deals as a two-person team

The four-reel slot machine for valuation

• Revenue is the baseline — the first reel
• Gross margin is the second reel; this company ran ~90% (own code, no licensing costs)
• Net retention is the third; they achieved 117% (negative 17% churn)
• Growth rate is the fourth; at 20–22% annual growth it was the weakest reel, but the others compensated
• Strong market conditions in early 2022 added further upside — timing is a real variable

Short-term generous, long-term greedy

• Never sold to a poor-fit customer to make a quarterly number
• Offered discounted entry pricing to under-budgeted prospects, knowing expansion would follow
• Sold concurrent licences rather than named-user licences — a structurally generous model customers preferred
• Licence limits did not hard-block usage when exceeded; customers weren't punished for growth
• Staffed a real phone line: human support on every call, no IVR, no outsourcing
• After resolving a support issue, reps asked about expansion — delight first, upsell second

Why the business worked

• Co-founder division of labour was clean: technical founder owned the product, sales founder owned the business — they stayed out of each other's way
• Avoided over-raising; no VC pressure meant no forced growth decisions
• Patience and long-term orientation prevented bad-fit sales and preserved reputation
• Deferred personal gratification — modest office, no unnecessary spend while profitable
• Avoided catastrophic events: no lawsuits, no major breaches (one scare in 2015 was contained)
• Made more good decisions than bad; recovered quickly from mistakes

Hardest moments

• Years 1–2: almost no revenue, considered taking any salaried job to escape the pain
• 2015: a third-party open-source vulnerability exposed customers' front-line security; company carried a $6M personal-guarantee loan at the time — nothing was lost, but the team had no ability to act until a patch was available
• Response to crisis: equanimity over panic; relied on the team, accepted what was outside their control

Post-exit: identity and purpose

• First exit cheque ($21M) was celebrated; second ($40M) was forgettable — diminishing emotional returns beyond a personal "enough" number
• Spent six months on boats and frozen drinks; found it boring
• Bought four houses and a jet; concluded experiences and relationships matter more than possessions
• Underestimated how much structure, purpose, and identity came from running the company
• Founded Beyond the Finish Line (btfl.org) for post-exit founders navigating the same transition
• New personal scoreboard: energy — if something gives energy, it's worth doing regardless of financial reward
• Now mentors founders at no charge via retiredfounder.com; no investments, no coaching fees, no equity taken