Business Valuation in Washington DC: The Capital Region Playbook
Washington DC is unlike any other M&A market in the country. In most cities, I talk to business owners about customer diversification and revenue growth. In DC, the first question is always: "What percentage of your revenue comes from federal contracts?" The answer to that question shapes everything about how your business gets valued.
The DC metro — spanning Northern Virginia, Maryland, and the District itself — is home to the densest concentration of government contractors, cybersecurity firms, and cleared defense businesses in the world. That creates a buyer landscape and valuation dynamic that doesn't exist anywhere else.
Government Contracting: The Dominant Force
GovCon is the backbone of DC-area M&A. More than half the transactions I see in this market involve some federal contracting component — whether it's a pure-play IT services firm on the Dulles Corridor or a facilities management company in Bethesda with a handful of GSA contracts.
GovCon valuations are driven by metrics that don't matter anywhere else. Contract backlog — the total value of awarded but unperformed contracts — is often more important than trailing revenue. A firm with $20M in revenue and $80M in backlog tells a buyer they have four years of visible revenue. That commands 8-14x EBITDA depending on contract type and recompete risk.
Contract vehicle accessmatters enormously. If your firm holds prime positions on IDIQ vehicles like OASIS, Alliant 3, or CIO-SP4, buyers will pay a premium just for that access. I've seen firms with mediocre financials sell at strong multiples because their contract vehicles gave the acquirer a path to $100M+ in task orders they couldn't otherwise compete for.
The type of contract matters too. Cost-plus contracts are safe but margins are capped at 8-12%. Fixed-price contracts carry more risk but offer 15-25% margins. T&M (time and materials) falls in between. Buyers run different multiples for each: cost-plus heavy firms trade at 7-10x EBITDA, while fixed-price firms with strong execution history can reach 12-15x.
The SCIF Premium: Cleared Businesses Command More
If your business operates a SCIF (Sensitive Compartmented Information Facility) or employs a significant workforce with TS/SCI clearances, you're sitting on something that can't be replicated quickly. Getting a facility clearance takes 12-18 months. Getting individual TS/SCI clearances takes longer and costs $50K+ per person through the investigation process.
Cleared businesses routinely trade at a 20-40% premium over comparable non-cleared firms. A cybersecurity company doing classified work for DOD or IC agencies might trade at 12-16x EBITDA, while an equivalent commercial cybersecurity firm in Tysons trades at 8-12x. The clearance infrastructure is the moat, and buyers — especially defense primes and PE-backed platforms — know it.
I worked on a deal last year where a 40-person IT services firm in Reston had unremarkable financials — $8M revenue, $1.2M EBITDA. But they had a SCIF, 30 employees with TS/SCI clearances, and prime positions on two classified contract vehicles. They sold for 14x EBITDA. The buyer told me they would have needed two years and $3M+ to build that cleared capability organically.
Cybersecurity: DC's Fastest-Growing Sector
The cybersecurity market in the DC metro has exploded. Between federal mandate-driven spending (CMMC, zero trust, FedRAMP), the intelligence community's appetite for offensive capabilities, and the spillover of commercial cybersecurity firms relocating to be near federal customers, this sector is white-hot.
Cybersecurity valuations in DC depend heavily on whether the revenue is product-based or services-based. Product companies — those with proprietary tools, platforms, or IP — trade at SaaS-like multiples of 6-12x revenue. Services firms — penetration testing, compliance consulting, managed security — trade on EBITDA at 8-14x, depending on contract stickiness and whether the work is classified.
The acquirer pool for DC cyber firms is deep: defense primes (Booz Allen, Leidos, SAIC), PE-backed platforms (like Accenture Federal Services), and increasingly, commercial cyber companies looking to add federal capabilities. That competition among buyers pushes multiples up.
Healthcare in the DC Metro
The DC metro's healthcare market is shaped by affluence and density. Northern Virginia and Montgomery County have some of the highest household incomes in the country, which means robust private-pay and commercial insurance mixes. Medicaid exposure is lower here than in most metro areas, and that matters for valuations.
Dental practices in the DC metro consistently trade at the upper end of national ranges — 80-90% of collections for private sales, 7-10x EBITDA for DSO acquisitions — because the payer mix is favorable and patient demographics support premium services like implants and cosmetic work.
The same dynamic lifts dermatology, med spas, and specialty practices. Anything with an elective or aesthetic component does well in a market where patients can pay out-of-pocket without flinching.
Professional Services and Consulting
DC is a consulting town. Management consulting, IT consulting, policy advisory, lobbying — these businesses are everywhere, and they present unique valuation challenges because they're almost entirely people-dependent.
The key question for any consulting firm valuation is how transferable the client relationships are. A firm where the founder personally knows every agency CIO and those relationships drive 60%+ of revenue is a risky acquisition. Buyers discount heavily for that owner dependency. Conversely, a firm with institutional relationships — where the contract is with the firm, not the partner — trades at much stronger multiples.
Small consulting firms (under $5M revenue) in DC typically sell for 3-6x SDE. Mid-market firms ($5-25M) with diversified client bases and strong contract backlog can reach 6-10x EBITDA. The outliers are firms with specialized expertise in areas like AI/ML, cloud migration, or cybersecurity policy that strategic acquirers are hungry for.
Defense and Intelligence: A Different World
Defense firms in the DC metro benefit from the most reliable customer in the world: the US government. DOD and IC budgets continue expanding, particularly in cyber, space, and AI. Small defense firms ($5-30M revenue) are the sweet spot for platform PE deals. A PE firm acquires one at 8-10x EBITDA, bolts on three or four similar firms at 5-7x, builds the combined entity to $100M+, and sells to a defense prime at 12-15x. This roll-up playbook has driven dozens of DC-area transactions over the past five years.
What Drives Premiums (and Discounts) in DC
Beyond the sector-specific dynamics, several DC-specific factors shape valuations.
Recompete risk is the biggest value killer in GovCon. If 40%+ of your revenue comes from contracts that recompete in the next 18 months, buyers will either discount your multiple or structure an earn-out around winning the recompetes. Smart sellers time their exit to follow a major recompete win, not before one.
Set-aside status — 8(a), HUBZone, SDVOSB, WOSB — can be both a premium and a risk. Buyers pay up for active set-aside certifications because they open doors to sole-source contracts. But if the set-aside status is tied to the departing owner, that value evaporates at close.
Facility clearance and SCIF infrastructure command premiums as discussed above. Key person dependencies on cleared technical staff — especially in intelligence work — create risk. If three engineers with unique clearances and program knowledge could leave post-acquisition, that risk gets priced in.
Geographic concentration actually works in your favor in DC. Unlike most markets where concentration in one metro is a negative, federal customers are concentrated in DC by definition. Being close to your customer is expected, not penalized.
The Bottom Line
The DC metro is a seller's market for well-positioned businesses, particularly in GovCon, cybersecurity, and defense. The combination of reliable federal spending, high barriers to entry (clearances, contract vehicles), and an active PE buyer community creates a competitive environment that pushes multiples above national averages. But the same factors that create premiums — contract concentration, clearance dependencies, recompete cycles — can destroy value if not managed carefully before going to market.
If you're running a business in the DC metro and thinking about an exit, the timing of your sale relative to your contract lifecycle matters more here than in any other market I work in. Get that right, and the multiples follow.
Want to see what your business is worth?
Institutional-quality estimates backed by 25,000+ real M&A transactions.
Get Your Valuation EstimateRelated Reading
How to Value a Cybersecurity Company
Valuation frameworks for cyber firms with government and commercial revenue.
The Complete Guide to Private Equity
How PE firms evaluate, acquire, and grow businesses in the DC market and beyond.
Owner Dependency: The Silent Value Killer
Why key-person risk matters even more when clearances and contracts are involved.