The Cleanest Scorecard I've Run All Month. The Verdict Is Still No.

This is the cleanest scorecard I have run all month. Five out of five. And I would still walk away from it.

Most buyers would run this through the criteria, see a perfect score, and start lining up the SBA paperwork. I ran the same numbers and got the same perfect score, and I am telling you to pass anyway. That gap, between what the calculator says and what I would actually do, is the most important thing I can teach you this week. A scorecard is necessary. It is not sufficient. Let me show you where it goes blind.

The Deal Snapshot

Here is the business, anonymized to the structure. A subscription AI tool launched in 2023, around 2,800 active paid subscribers paying roughly $20 a month, about $50K in monthly recurring revenue. It refines AI-generated writing and checks it against detection systems. Revenue scaled fast, from $31K to $331K to roughly $700K. It runs on a modern cloud stack with billing fully automated, no employees, owner involvement under five hours a week, and fewer than five support tickets a day. On paper it is the business your inbox keeps promising you: passive, high-margin, hands-off.

BY THE NUMBERS

Asking: $1,200,000

Cash flow: $403,205

Score: 5/5 on paper — Verdict: PASS on judgment

Bulletproof Score Card

Every single criterion clears. This is not a near miss. Look at how clean it is.

Five passes. If I scored deals on arithmetic alone, this email would end right here with a green light. It does not, and the reason is everything that follows.

The 80/10/10 Deal Structure

The structure is genuinely clean, which is what makes this case useful. The business is SBA pre-qualified, so the standard path is open. An SBA 7(a) loan covers $960K, the seller carries $120K on a note, and your down payment is $120K.

Here is your math. Your cash in, counting the down payment, a working capital cushion, and closing costs, is roughly $324,000. Your debt service runs about $161K a year between the SBA loan at 10.5% over ten years and the seller note at 5% interest-only. Against $403K of cash flow, your DSCR is 2.50x and holds at exactly 2.00x even after a 20% revenue haircut. Your owner cash flow after debt, run absentee the way it operates today, is about $242,000 a year. You would get your down payment back in roughly six months. Run it yourself in 60 seconds at DealScore Pro and you will land in the same place: on structure, this deal is sound.

What's Working

The margins are real and the operation is genuinely lean. A 58% SDE margin with no employees and automated billing is not a fantasy here. The cost structure is mostly ad spend and hosting, and the hosting scales on its own. This is what a clean software P&L looks like.

Demand showed up fast and repeats. Going from $31K to roughly $700K in revenue in a short window is real product-market fit, not a vanity chart. Users come back because the problem recurs. That is the engine working.

There is untapped upside a new owner could actually capture. A 300,000-contact email list with zero lifecycle campaigns running against it. No SEO program at all. TikTok barely tapped. These are real levers, and pulling them does not require rebuilding the business. That is the kind of moat-expansion a new owner can do in the first ninety days.

Watch Out For

The product is fighting a war it can lose overnight. This is the one that decides the deal. The entire value proposition depends on staying one step ahead of detection systems. That is a cat-and-mouse game against the largest, best-funded technology companies on earth. The day the major AI models watermark their output natively, or detection takes a real leap, the core use case can compress fast. You are buying a 3-year-old business whose moat is a head start in a race that never stops, and the other runners have unlimited budgets. Pay attention to what the listing is not saying about how durable that lead actually is.

The growth engine runs on platforms that can switch it off. Customer acquisition is built on paid ads across Meta, Google, and TikTok, with a blended 2.97x return. That return is the whole growth story. But those platforms write and enforce their own rules about what they will run ads for, and a tool positioned around defeating detection sits in a gray zone. One enforcement wave and the acquisition machine throttles or stops. A business that lives entirely on rented paid traffic does not control its own front door.

Short customer lifespan, no retention infrastructure. Average user lifespan is about five and a half months and lifetime value sits near $110. The revenue tracks usage cycles closely, which means churn is high and the business has to keep buying new users to stand still. The 300,000-person email list is upside precisely because no retention system exists yet. Today, this is a paid-acquisition treadmill, and treadmills are only fun while the belt keeps moving.

The Analysis: Why a 5/5 Can Still Be a Pass

So we have a deal that clears every criterion and still gives me pause. How do you hold both of those at once? You remember what the scorecard is for. The five criteria measure whether a deal is financially survivable: can it carry its debt, is the price sane, does it throw off real cash, can you fund the working capital, is the structure clean. This business answers yes to all five. What the criteria do not measure is whether the cash flow itself is durable. They photograph the business as it sits today. They cannot tell you whether today repeats.

Here is where the math gets honest. A 2.0x stressed DSCR assumes a 20% revenue decline as the worst case. That is the right stress test for a trucking company or a cleaning business, where a 20% drop is a bad year. It is the wrong stress test for a business whose entire category could halve in a single product update from OpenAI or a single policy change at Meta. The risk here is not a slow 20% grind. It is a cliff. And a scorecard built to model gentle declines is the wrong instrument for a cliff.

I have watched buyers fall for clean scorecards on fragile businesses more than once over the years. A few years back the pattern was app businesses living entirely on one platform's algorithm. The numbers looked Bulletproof right up until the platform changed the rules, and then the cash flow the buyer financed against simply evaporated. Banks won't catch this for you. The SBA pre-qualification certainly won't. The lender is checking whether you can service the debt on last year's numbers, not whether last year's numbers survive contact with next year.

After 35 years of looking at these, I have learned to ask one question the scorecard never will: if I had to own this for ten years, do I believe the cash flow is still here in year three? For a recurring-revenue business with a sticky base and a durable need, the answer is often yes. For a 3-year-old tool whose core function is to stay ahead of a detection arms race, funded by ads on platforms that may not want it, I cannot honestly say yes. And I will not finance ten years of debt against a cash flow I am not confident survives three. There is also a quieter issue worth naming once: a meaningful share of the demand is tied to people getting around the rules of institutions they answer to. I will let you weigh that part for yourself, but it is part of the risk, because businesses built on circumventing somebody's rules tend to attract the attention of the people whose rules they circumvent.

If you want to test this yourself, model it in DealScore Pro twice. Once at the standard 20% stress, where it passes. Then drop the revenue 50% and watch what happens to your DSCR and your owner cash flow. The first number is the deal the broker is selling you. The second is the deal you might actually own.

The scorecard tells you if a deal can survive a bad year. It can't tell you if the business survives a good update from a competitor.

None of this means the business is worthless or that nobody should buy it. A strategic buyer who already operates in AI tooling, who can fold this into a broader product and absorb the category risk, might see real value here, especially at a sane 2.98x multiple. But for an individual buyer putting 10% down and financing the rest with an SBA loan against their personal guarantee, the risk profile and the financing structure do not match. You would be taking ten-year, personally-guaranteed debt against a business that may not look anything like this in eighteen months. That is the mismatch.

A perfect score on a fragile business isn't a green light. It's a reminder that the score was never the whole job.

Mike's Verdict: PASS (the math passes, judgment overrides)

On the numbers this is a 5 out of 5. On judgment it is a Pass, and the two are not in conflict, they are doing different jobs. The structure is clean, the margins are real, and for the right strategic buyer there may be a deal here. But for an individual buyer financing this with ten-year personally-guaranteed debt, I cannot get comfortable underwriting a category that can compress overnight and an acquisition engine that runs on platforms that can turn it off. I would rather pass on a great-looking deal than personally guarantee a debt against cash flow I do not believe survives the next three years. If you have data that proves the durability, I would look again. Absent that, this is a walk.

What This Means For You

If you are evaluating a deal right now and the scorecard comes back clean, run one more test before you celebrate: stress the revenue by 50%, not 20%, and ask whether you believe the cash flow survives three years. The criteria tell you a deal is survivable today. Only judgment tells you it is durable tomorrow.

Want to see how I stress-test every deal against cost shocks, revenue dips, and hidden liabilities before I'd put a dollar at risk? I walk through the entire Bulletproof method in a free 28-minute masterclass.

Forward this email. Tell them to grab Mike's free book - Real Estate Is for Suckers: Buy a Business Instead. Same framework Mike uses to stress-test every deal.