What the data shows this week
Across 172 public SaaS companies, the median EV/Revenue multiple stands at 4.0x, with median revenue growth of 14.9% and FCF margin of 12.6%. The Rule of 40 sits at 32.8%. However, sector breakdown reveals stark contrasts. The Security sector (3 companies) commands a premium 5.8x multiple despite slower 12.0% growth, suggesting investors prize defensive, high-margin characteristics. Security's FCF margin of 21.6% is nearly double the overall median, compensating for growth shortfall. Gross margins are similar (73.9% vs 74.6%), so the multiple premium is driven by profitability and perceived resilience. The Rule of 40 for Security matches the overall median at 32.8%, but the composition differs: Security relies more on FCF efficiency, while the broader market leans more on growth. This divergence indicates that a one-size-fits-all Rule of 40 threshold may obscure underlying risk profiles.
Why this matters for founders
Founders in Security SaaS can command higher multiples even with slower growth, but only if they demonstrate strong unit economics and cash flow discipline. The data shows that investors are rewarding Security companies for their high FCF margins (21.6%) relative to the overall market (12.6%). For founders outside Security, the median multiple of 4.0x implies that growth alone is not enough—efficiency matters. With median growth at 14.9%, achieving a Rule of 40 above 32.8% requires balancing growth and profitability. Founders should benchmark against their specific sector medians rather than aggregate numbers. The Security sector's premium suggests that investors are willing to pay more for recurring revenue with high retention and low churn, even if top-line growth is modest. As capital becomes more selective, founders should focus on improving FCF margins and gross margins to justify valuation.
One metric to watch
The Security sector's FCF margin of 21.6% is the standout metric this week. It is nearly 70% higher than the overall median of 12.6%, and it directly supports the sector's elevated EV/Revenue multiple of 5.8x. This metric highlights a key insight: in a market where median Rule of 40 is 32.8%, the composition of that score matters. Security companies achieve the same Rule of 40 with less growth but more profitability, which investors currently reward. Founders and operators should track their own FCF margin relative to their sector's median. If your company's FCF margin is below 12.6% (overall median) or 21.6% (Security median), you may be undervalued unless growth compensates. Conversely, if you have high FCF margins, you can afford to invest in growth without sacrificing multiple. As the market evolves, FCF margin may become as important as growth in determining SaaS valuations.