How to buy a SaaS business: A complete guide for first-time buyers in 2026

Acquiring a SaaS business is one of the more accessible ways to enter software entrepreneurship without building from scratch. The rise of verified-revenue marketplaces, escrow-protected transactions, and standardized deal documents has lowered the friction enough that solo buyers, small holdcos, and search funds regularly close acquisitions in the $5,000–$500,000 range. This guide walks through the full process — from defining your acquisition criteria to closing the deal and managing the transition.

It is written for first-time buyers, but the structure applies whether you are buying a $10,000 micro-SaaS as a side project or evaluating a $250,000 acquisition as part of a buy-and-build strategy.

TL;DR

A successful SaaS acquisition typically follows seven stages: (1) define what you want to buy and how much you can pay, (2) find listings on verified-revenue marketplaces, (3) evaluate listings with a structured framework that prioritizes verified financials over seller claims, (4) make a written offer and negotiate price and terms, (5) sign a Letter of Intent (LOI) to lock in exclusivity for due diligence, (6) conduct due diligence covering financials, technology, customers, and legal, (7) sign an Asset Purchase Agreement (APA) and close through escrow.

The whole process can take 30–90 days for small deals and 90–180 days for mid-range deals. Verified-revenue platforms like SAASALE, TrustMRR, and Acquire.com handle most of the structural pieces (deal flow, document generation, escrow integration), so first-time buyers can focus on evaluation and negotiation rather than building infrastructure.

Step 1: Define your acquisition criteria

Before browsing any marketplace, write down what you are actually looking for. Vague criteria produce a flood of irrelevant listings and slow the entire process. Specific criteria filter the catalog down to a few real candidates.

Budget. Your budget is not just the asking price. Include closing fees (commissions of 4–10% on most platforms), Escrow.com fees ($400–$2,000 depending on deal size), legal review if you hire a lawyer ($500–$3,000), and a working capital reserve for the first 3–6 months post-acquisition. A practical rule: if your total available capital is $50,000, target SaaS listings priced at $35,000–$40,000 to leave room for fees and operating cash.

Revenue range. Pick a monthly revenue floor and ceiling. A SaaS earning $500/month is a different acquisition than one earning $5,000/month — different valuation multiples, different operational complexity, different growth potential. Most first-time buyers do well in the $500–$3,000 monthly revenue range, where the project is real but not yet at the scale that requires a team.

Category and complexity. Do you want a developer tool? A B2B vertical SaaS? A consumer subscription app? Pick categories you understand or where you have a domain advantage. A marketing professional buying a marketing-analytics SaaS has a clear edge over the same person buying a developer tool, even if the latter has better metrics.

Technical ownership. Are you a developer who can maintain the codebase yourself, or will you hire? If you cannot read the code, factor in $500–$2,500/month for a part-time developer to maintain and ship updates. This dramatically changes the unit economics.

Time commitment. SaaS businesses are not passive income. Even a stable, slow-growing project requires customer support, security patches, and occasional product changes. Estimate honestly how many hours per week you can commit.

Multiple range. Most SaaS businesses sell at 2–4x annual revenue (24–48 months of MRR). Higher multiples (5x+) apply to fast-growing or strategically positioned businesses; lower multiples (1–2x) apply to declining or risky ones. Write down your acceptable multiple range based on the project profile you want.

Deal-breakers. What will make you walk away no matter how good the rest looks? Common ones: revenue concentration in one customer (>30% of MRR from one account), no legal entity or messy IP ownership, dependency on a single platform that could change terms (App Store, third-party API with no SLA), no customer relationship outside the founder.

Write these criteria down before you start browsing. You will be tempted to bend them when you see a project you like. The discipline of revisiting your written criteria filters most of those impulses.

Step 2: Where to find SaaS businesses for sale

Several marketplaces specialize in SaaS acquisitions, each with different verification models and fee structures.

SAASALE — A SaaS-specific marketplace that verifies revenue through 17 payment provider integrations on every listing (Stripe, Lemon Squeezy, Paddle, Polar, RevenueCat, DodoPayment, Superwall, Creem, Chargebee, Recurly, Maxio, Adapty, Apphud, Qonversion, Glassfy, PayPal, SumUp). Every listing carries an AI Deal Score combining verified data with AI agent analysis across six metrics. Browsing is free, no buyer subscription. The catalog launched with 495 pre-tracked projects from SaaS Radar and is growing.

TrustMRR — The original verified-revenue marketplace, built by Marc Lou. Verifies revenue through 8 payment providers (Stripe, Lemon Squeezy, Polar, Paddle, RevenueCat, DodoPayment, Superwall, Creem). Catalog of 1,000+ verified startups with around 142 actively on sale at any time. Buyer Alerts cost $199/year. No automated scoring layer.

Acquire.com (formerly MicroAcquire) — A larger established marketplace with over 2,000 closed deals. Listings are curated by the Acquire team and anonymous by default. Buyer access requires a paid subscription: Premium ($390/year) for startups up to $250k TTM revenue, Platinum for full catalog access. Verification uses Stripe integration plus uploaded documents reviewed during due diligence.

Flippa — The largest general-purpose digital business marketplace. SaaS sits alongside e-commerce, content sites, mobile apps, and domains. Verification is automatic only for listings priced at $50,000+; smaller listings rely on buyer due diligence. Auction format is common for smaller deals.

Direct outreach — Some buyers skip marketplaces entirely and reach out to SaaS founders directly through Twitter, LinkedIn, or cold email. This works if you have specific targets in mind, but the process is slower and verification is entirely your responsibility. Many founders who sell direct also list on a marketplace simultaneously to anchor pricing.

For most first-time buyers, the practical approach is to browse SAASALE and TrustMRR (both free to browse, both with verified financials on every listing) for filtering, evaluate the top 5–10 candidates seriously, and consider a paid subscription on Acquire.com only if your target deal size is above $50,000 and you want access to that catalog's higher-revenue listings.

Step 3: How to evaluate a SaaS listing

Once you have a shortlist of 5–10 candidates, run each through a structured evaluation. The goal is to figure out, before you commit time to a deal, whether the project is worth pursuing.

Verified vs claimed financials

The first thing to check on any listing is whether the financials are platform-verified or seller-supplied. On SAASALE and TrustMRR, every listing shows revenue pulled directly from the seller's payment provider through a read-only API integration. On Acquire.com and Flippa for listings under $50k, you typically see seller-claimed numbers backed by exports or screenshots during due diligence.

Verified beats claimed every time, but verified does not mean perfect. Verified revenue tells you what came in through the connected payment provider. It does not tell you about refunds processed outside that provider, side payments via PayPal that were not connected, or one-time deals counted as recurring. Use verified numbers as your starting baseline, and probe further during due diligence.

Revenue stability

Look at the trend over 6–12 months. A SaaS with $2,000 MRR that has been at exactly $2,000 for the last six months is very different from one that bounced between $500 and $3,500. Stable trends suggest healthy retention. Wild swings suggest churn issues or one-off deals.

If the marketplace shows a revenue chart, study it. If only point-in-time figures are shown, ask the seller for monthly revenue going back 12 months as part of due diligence.

Customer concentration

Ask: how many active subscribers? If the answer is fewer than 10, customer concentration is a major risk. Even at 50 customers, losing your top 3 could cut revenue by 30%+. Healthy SaaS businesses typically have at least 30–50 active subscriptions, with no single customer accounting for more than 10–15% of MRR.

On verified-revenue platforms, the active subscription count is usually displayed. On manual-verification platforms, ask explicitly during due diligence and request anonymized customer-level revenue breakdown.

Profit margin and operating costs

Revenue is not profit. A SaaS earning $3,000/month that spends $2,500/month on hosting, third-party APIs, payment processing, and a part-time developer has $500/month in real profit. The same SaaS without those costs would be a 6x better business.

Ask for a P&L going back 6–12 months. Look at: hosting costs, third-party API costs (especially if the product depends on OpenAI, Twilio, etc.), payment processor fees, advertising spend, and any contractor or staff costs. Subtract these from revenue to get real profit margin. Apply your valuation multiple to profit, not revenue, for a sanity check on the asking price.

Multiple and pricing reasonability

Calculate the multiple yourself: asking price / annualized last-30-days revenue. A SaaS asking $30,000 with $1,000 MRR has a 2.5x multiple, which is reasonable. A SaaS asking $100,000 with $1,000 MRR has an 8.3x multiple, which is high for typical micro-SaaS unless growth or strategic value justifies it.

Reference benchmarks: stable SaaS at 2–4x, fast-growing SaaS at 4–6x, declining SaaS or short-history SaaS at 1–2x. Mobile apps and consumer subscriptions typically trade at lower multiples than B2B SaaS (more churn, more reliance on paid acquisition).

AI Deal Score (when available)

On SAASALE, every listing has an AI Deal Score combining verified data and AI agent analysis. The score is meant as a first-pass filter, not a final answer. Use it to quickly identify which candidates are worth deeper evaluation, then do your own analysis on the shortlist.

The score weighs PMF (active subscribers, 27%), Freshness (revenue retention, 20%), Volume (last 30 days revenue, 18%), GEO Leverage (LLM recommendation potential, 14%), Saturation (niche competition, 11%), and Replaceability (ChatGPT replacement risk, 10%). A score of 7+ usually means the verified data and market position are strong; 5–6 means mixed signals worth investigating; under 5 means significant red flags somewhere.

Tech stack and code quality

What is the project built on? Modern stack (Next.js, TypeScript, PostgreSQL) is easier to maintain and hire for than legacy stack (PHP 5, jQuery, MySQL with stored procedures). Custom-built monoliths are harder to maintain than projects built on widely-used frameworks.

If you are not technical, factor in the cost of finding a developer who can work with the existing stack. If the stack is obscure, the available developer pool is small and rates are high.

SEO and traffic

If the marketplace integrates with a third-party SEO source (SAASALE displays a DataForSEO trust badge with organic traffic and keyword data), you can see traffic without asking. For platforms that do not, ask the seller for Google Search Console access during due diligence and verify the organic traffic claims yourself.

Watch for traffic concentration. A SaaS where 80% of organic traffic comes from one keyword is at risk if Google's algorithm changes or a competitor outranks them. Diversified traffic (no single keyword over 30% of total) is much more resilient.

Step 4: Make an offer

Once you have identified a serious candidate, make a written offer through the marketplace. Three components matter: price, terms, and timeline.

Price. Make a number, not a range. Sellers respond better to "$28,000" than "$25,000–$30,000." If you want to start below asking, do it directly (e.g. asking is $35,000, you offer $28,000) rather than hedging.

Terms. Standard structure for small deals is 100% cash at closing through escrow. For larger deals, sellers sometimes accept structured payments (50% at closing, 50% over 6 months) or earnouts (additional payment if the business hits revenue targets post-acquisition). Earnouts protect the buyer against revenue claims that turn out to be inflated, but they are harder to enforce post-closing. For first-time buyers, simpler is usually better — pay 100% at closing and rely on escrow's 30-day inspection period to catch problems.

Timeline. State when you want to close. A typical small-deal timeline is 30–45 days from offer to closing: 7–14 days for negotiation, 14 days for due diligence under LOI, 7–14 days for APA and escrow.

Most marketplace platforms have a structured offer flow with pre-formatted fields. SAASALE's offer flow includes optional AI moderation that filters low-quality offers before they reach the seller. Your offer should be clear, specific, and avoid filler — "I am offering $28,000, all cash at closing, with a 14-day due diligence period under LOI. I can close within 30 days. My background is X and I am acquiring this for Y reason."

If the seller counter-offers, you negotiate within the marketplace's deal chat. Most first-deal closes happen within 2–4 negotiation rounds. If you find yourself at 10 rounds, the deal is likely not going to close — either the price gap is structural or one of you is not committed.

Step 5: Sign a Letter of Intent (LOI)

Once price and basic terms are agreed, both parties sign a Letter of Intent. The LOI is a non-binding agreement that lays out the deal structure and locks in exclusivity for a specified period (commonly 30 days), during which the seller cannot accept offers from other buyers and you commit to using that period to conduct due diligence.

The LOI typically includes: agreed purchase price, payment structure (cash, structured, earnout), exclusivity period, due diligence access list (financials, technology, legal documents, customer data), confidentiality provisions, and the expected closing date.

On marketplaces with built-in LOI flows (SAASALE, TrustMRR, Acquire.com), the LOI is generated client-side in your browser, signed via canvas signature, and binds both parties to exclusivity once countersigned. Document content does not leave your device until you sign — a privacy-by-design pattern shared across the major SaaS marketplaces.

Pay attention to the exclusivity duration. 30 days is standard; some sellers ask for 14 days, which can be tight for a first-time buyer doing thorough due diligence. If you need 21–30 days, negotiate it before signing the LOI rather than asking for an extension later.

Step 6: Conduct due diligence

Due diligence is where most deals either confirm or fall apart. The goal is to verify everything the seller claimed before you commit money. Cover four categories: financial, technical, customer/operational, and legal.

Financial due diligence

Even if revenue is platform-verified, validate the rest:

• Request 12 months of revenue, refunds, and chargebacks from the payment provider directly (the seller can grant read-only access).
• Reconcile platform-displayed revenue against the bank statements or accounting records to catch revenue not flowing through the connected provider.
• Get the P&L for 12 months and verify each line item. Hosting bills (AWS, Vercel, Railway), API bills (OpenAI, Twilio, Stripe), domain renewals, software subscriptions used to run the business.
• Confirm the legal entity (if any), bank account ownership, and tax filing status. For US-based SaaS, request EIN and recent tax returns or extensions. For non-US sellers, ask how the business has been operated tax-wise.
• Calculate adjusted EBITDA: revenue minus all real costs minus any unusual one-offs. This is the number the multiple should apply to.

Technical due diligence

• Get a code walkthrough or read-me from the seller. If the project is built on a custom framework, understand what is required to maintain it.
• Check infrastructure: how is hosting set up? What providers? Are credentials in a password manager that will be transferred? Are there secrets in environment variables that must be rotated post-transfer?
• Identify dependencies on third-party APIs and platforms. If the project depends on the App Store, Stripe, OpenAI, Twilio, or any other external platform, what is the risk that platform changes terms or shuts down access?
• Check for security: how are user passwords stored (bcrypt, argon2, plaintext)? Has there been a security audit? Are there exposed API keys in the code repository?
• Estimate the technical maintenance burden. How often does code need to be touched? Are there outstanding bugs or technical debt that will eat into your time?

Customer and operational due diligence

• Customer count, MRR by customer, and churn over the last 6 months. A 5% monthly churn means you lose half your customer base in 14 months without growth, which dramatically affects the business value.
• Customer support history. How many tickets per week? What are the common issues? Are there refund disputes outstanding?
• Marketing channels. Where are customers coming from? SEO, paid ads, partnerships, founder's personal brand, referrals? Channels tied to the founder personally (their Twitter audience, their YouTube channel) often do not transfer with the business.
• Operational SLAs. Is there an explicit uptime commitment? What happens if the service goes down for a day after you take over?

Legal due diligence

• Trademark and brand ownership. Is the brand registered? Where? Is there outstanding IP litigation?
• Customer contracts. Are there enterprise contracts with specific terms? Do any contracts have change-of-control clauses that require customer consent for the acquisition?
• Privacy policy and Terms of Service. Are they consistent with what the product actually does? Are GDPR/CCPA compliance items in place if you serve European or California customers?
• Refund policy. What are the seller's commitments to existing customers, and what becomes your obligation post-acquisition?

For first-time buyers without legal background, hire a lawyer for at least the legal portion. A 1–2 hour review of the APA and customer agreements typically costs $500–$1,500 and catches issues that pay for themselves many times over.

Step 7: Sign the Asset Purchase Agreement (APA)

If due diligence checks out, the next document is the Asset Purchase Agreement (APA) — the binding contract that transfers the business assets from seller to buyer in exchange for payment. The APA is the legal substance of the deal; the LOI was the placeholder.

Key APA provisions to understand:

What is being purchased. The APA lists every asset transferring: source code, domain names, customer data and contracts, social media accounts, payment provider accounts, intellectual property, trademarks, marketing materials. Anything not on this list does not transfer.

Closing date. Typically 7 days after APA signing, to give both parties time to coordinate the transfer logistics.

Transition period. The seller's obligation to support you post-acquisition. Common terms: 14 days of email/chat support to answer questions, code walkthrough, transfer of credentials and accounts. SAASALE's APA template defaults to 14 days transition support; longer (30–60 days) can be negotiated for complex deals.

Non-compete. A clause restricting the seller from launching a directly competing product for a defined period. Common terms: 12 months, geographically limited or limited to direct competition. Non-competes in many jurisdictions are only enforceable if reasonable in scope and duration.

Representations and warranties. Statements the seller is making about the business that, if false, can entitle you to claw back part of the purchase price. Typical reps cover: ownership of all assets, no IP infringement, accurate financial statements, no undisclosed liabilities. If a representation turns out to be false, this is your legal recourse.

Indemnification. What happens if a problem emerges post-closing — say, a customer sues over an issue that existed before you bought the business. Indemnification clauses define which party is responsible.

On marketplace platforms with built-in APA generation (SAASALE, TrustMRR, Acquire.com), the APA is generated from a template, populated with your specific deal terms, signed via canvas, and bound by both parties' counter-signatures. SAASALE's APA includes readonly default Terms (closing +7 days, transition 14 days, non-compete 12 months) which can be customized but are pre-set to industry-standard values for first-time buyers.

Step 8: Closing through escrow

Closing is the actual transfer of money and assets, which both happen through Escrow.com on every major SaaS marketplace. The mechanics:

• Once the APA is signed, the buyer initiates an escrow transaction on Escrow.com (linked from the marketplace platform).
• Buyer funds the escrow account with the full purchase price.
• Seller is notified that funds are held and begins transferring assets — domain transfer, code repository access, customer database, payment provider accounts, etc.
• Once asset transfer is complete, the buyer marks the assets as received in the platform.
• The 30-day inspection period begins. During this period, you verify that the assets work as described and that the seller has performed their transition obligations.
• At the end of the inspection period (or earlier, if you accept), funds are released to the seller. The closing fee (commission) is deducted automatically by Escrow.com on platforms that integrate it.
• If something is wrong during inspection, you can reject the transfer and Escrow.com mediates the dispute.

SAASALE uses a buyer-controlled receive trigger: the 30-day timer starts only when you mark assets as received. This is useful when the asset transfer takes weeks (Apple Developer accounts, App Store listings, custom-domain DNS migrations, multi-stage code repository transfers). The buyer chooses when to start the inspection clock.

Escrow.com fees are typically 0.89% of the transaction with a $25 minimum, paid by whichever party the platform configures (on most SaaS marketplaces, the buyer pays).

Closing typically takes 7–14 days from APA signing depending on asset transfer complexity. Domain transfers between registrars take 5–7 days minimum due to ICANN policies. Apple Developer account transfers can take 2–4 weeks. Plan accordingly.

Step 9: Post-acquisition transition

The deal closes. Now the work starts.

Week 1: stabilize.

• Rotate all credentials and API keys. Even with a clean transfer, reset passwords, generate new API keys, change admin emails.
• Verify backups are running.
• Confirm that monitoring and alerts are pointed at your email/Slack/etc.
• Test the full customer signup flow end-to-end.

Weeks 2–4: learn the business.

• Read every customer support ticket from the last 90 days. This teaches you the most common issues and the personality of the customer base.
• Talk to 5–10 active customers. Even a 15-minute call ("hey, I just acquired this product, want to make sure I understand what's working for you") generates massive insight and goodwill.
• Map out the marketing channels and where customers actually come from. Verify the seller's claims by looking at the analytics yourself.

Months 2–3: small improvements.

• Resist the urge to redesign the product or rewrite the codebase. First, fix the most-complained-about issues from your support ticket review.
• If the seller is still on transition support, extract maximum value: ask every operational question you have, get walkthroughs of every system, document everything.
• Build your own ops manual. Six months from now, when you have forgotten how something works, your past self should have written it down.

Months 4–6: growth.

• By now you understand the business well enough to make growth bets. Pick one channel to push (SEO, content, paid ads, partnerships) and commit for 90 days.
• Track results carefully. SaaS growth experiments take time to read; do not pivot every two weeks.

Common mistakes first-time buyers make

Falling in love with the first listing. You will see one project that "feels right" and want to skip due diligence. Don't. Apply the same evaluation framework to every candidate.

Anchoring on a low purchase price instead of unit economics. A $5,000 SaaS with $200/month profit might be worse than a $30,000 SaaS with $2,000/month profit. Compare on payback period (purchase price / monthly profit), not absolute price.

Skipping the P&L review. Verified revenue tells you the top line. Real costs determine whether the business is actually profitable. Ask for the full P&L every time.

Underestimating the time commitment. "Passive income from a SaaS business" is a marketing line. Even stable SaaS requires 5–15 hours per week of attention. Plan for that.

No technical plan. If you cannot maintain the codebase yourself and have no developer lined up, the acquisition is risky. Either learn enough to do basic maintenance, or budget for a developer relationship before you close.

Trusting unverified financial claims. If the platform does not verify revenue automatically, do it yourself during due diligence. Bank statements, payment processor exports, tax documents.

Using a non-standard contract. Whatever marketplace you use, use their built-in APA template. It has been refined across many deals. Custom contracts written by inexperienced parties are usually worse, not better.

Closing before due diligence is done. The pressure to close once you have signed an LOI is real. Resist it. If you have unanswered questions at the end of the exclusivity period, request an extension; do not paper over uncertainty by signing the APA.

FAQ

Last updated April 2026. SaaS acquisition practices evolve — consult a lawyer or M&A professional before closing any specific deal. This guide is informational and does not constitute legal, financial, or tax advice.