Enterprise Software M&A: Thoma Bravo, Vista, and the Buyout Playbook in 2026

Executive Summary

Enterprise software remains private equity's most coveted asset class in 2026 — predictable recurring revenue, low capital intensity, sticky customer bases, and pricing power that survives most macro environments. Thoma Bravo and Vista Equity Partners, the two dominant software-focused PE firms, have collectively deployed over $120 billion since 2019 and developed distinct but overlapping playbooks. After a 2022–2023 rate-driven pause, the take-private pipeline is active again: deal flow in H2 2025 and Q1 2026 has been the highest since 2021, as elevated rates moderated, LBO financing markets reopened, and a cohort of mid-cap SaaS companies remain priced below peak multiples. This note explains the playbook, evaluates current deal flow, identifies likely targets, and draws out the implications for public market investors.

Why Enterprise Software Is PE's Favorite Asset Class

The PE appeal of enterprise software is textbook:

• Revenue predictability: Subscription ARR with 90%+ renewal rates is more forecastable than almost any other business.
• Pricing power: Enterprise software vendors can raise prices 5–8% annually with limited churn in sticky, mission-critical products. Customers have spent 18 months integrating a product into their workflow — they will absorb price increases before facing switching costs.
• Capital efficiency: SaaS gross margins of 70–80% mean that every dollar of price increase flows directly to EBITDA, unlike a manufacturing business where input costs eat into margin expansion.
• Operational levers: Most software companies acquired by PE are undermanaged on cost — R&D and S&M bloat, excessive headcount relative to ARR, and underinvestment in pricing discipline create immediate post-acquisition EBITDA improvement.
• Roll-up potential: Fragmented verticals (legal tech, construction tech, HR compliance) allow PE firms to acquire 3–8 companies in adjacent niches and present a unified platform to enterprise buyers.

The Playbook: Cut Costs, Raise Prices, Roll Up

The Thoma Bravo/Vista playbook is not subtle:

Step 1 — Cost reduction (months 1–12): Immediately post-close, reduce R&D headcount by 15–30% (focusing on legacy product lines), cut S&M by rationalizing low-ROI territories, and eliminate public company overhead (IR, audit, D&O insurance, board fees). A well-run take-private can add 15–25 percentage points of EBITDA margin in year one through cost actions alone.

Step 2 — Pricing discipline (ongoing): Implement annual price increases of 5–8%, enforce contract minimums, and reduce discounting by eliminating quota-driven sales reps who discount to hit targets. Introduce multi-year contract incentives to lock in ARR.

Step 3 — Product rationalization: Sunset low-adoption features, consolidate product lines, and focus engineering on core modules that drive 80% of renewal decisions.

Step 4 — Tuck-in acquisitions: Add adjacent products to expand average contract value (ACV) and create cross-sell opportunities. A single integration partner is 5–10x more efficient to retain than new logo acquisition.

Step 5 — Exit: After 3–5 years, sell to a strategic (SAP, Oracle, Salesforce, ServiceNow) at 15–25x EBITDA, or re-IPO when public markets are receptive to profitable SaaS stories.

Thoma Bravo's Track Record: Wins, Losses, and What They Actually Did

Thoma Bravo, founded in 1980 and software-focused since the 2000s, has executed 50+ software acquisitions. Selected outcomes:

Wins:

• SolarWinds (taken private 2016 for $4.5B, IPO'd 2018 at $12B): Classic margin expansion story — cut R&D, raised prices on the MSP base, re-IPO'd at 2.7x invested capital.
• Sophos (acquired 2019 for $3.9B, sold to Broadcom 2023 for ~$5.5B): Cybersecurity roll-up with Barracuda Networks, scaled to ~$1B ARR.
• Proofpoint (taken private 2021 for $12.3B): Email security platform, rationalized product suite, reduced headcount ~15%, positioned for re-IPO or Cisco/Broadcom strategic acquisition.
• Ping Identity + ForgeRock merger (2023): Identity management roll-up creating a $1B+ ARR platform competing with Okta.

Losses and challenges:

• Solera (acquired 2016 as auto claims software): Heavily indebted ($6.5B LBO), margin expansion slower than expected due to integration complexity, sold in parts.
• SolarWinds post-IPO: The SUNBURST breach (December 2020) — a nation-state supply chain attack — created $1B+ in legal liability and permanently damaged the brand. Thoma Bravo's post-IPO paper gains evaporated.

What they actually did differently from the playbook: Thoma Bravo invests heavily in product — they don't cut R&D to zero. Their thesis is that retaining key engineers while cutting non-performing headcount creates better outcomes than pure cost optimization. Their operating partner model embeds ex-software executives in portfolio companies, not just financial engineers.

Vista Equity Partners: The Operational Model

Vista Equity Partners, founded by Robert Smith in 2000, has $100B+ AUM and a more formalized operating model than Thoma Bravo. Vista's key differentiator is the Vista Consulting Group (VCG) — an internal operations team of 200+ professionals who implement standardized "Vista Best Practices" across every portfolio company.

Vista Best Practices include:

• Standardized KPI reporting frameworks (ARR waterfall, net revenue retention, CAC payback)
• Sales process playbooks (MEDDICC qualification, deal desk governance, pricing waterfall)
• People practices (compensation benchmarking, performance review cadence, leadership development)
• Technology stack standardization (Salesforce CRM, Workday HRIS, NetSuite ERP)

The model is efficient because every Vista company gets 15 years of accumulated software operator knowledge on day one. The risk is homogenization — applying the same playbook to fundamentally different businesses can break what made the target valuable.

Representative Vista investments:

• Ellucian (higher education software): Taken private 2015, sold to Veritas 2018 for $3.5B (~3x return).
• Datto (SMB backup/DR): Grown from $100M to $400M ARR under Vista, IPO'd 2020, acquired by Kaseya 2022 for $6.2B.
• JAMF (Apple device management): IPO'd in 2020; Vista retained significant post-IPO position.
• Cvent (event management): Taken private 2016, re-IPO'd 2022 (CVNT).

Current Deal Flow: What's Getting Done in 2026

Post-2022 rate shock froze software LBOs: financing costs nearly doubled (SOFR + 500–550bps for leveraged loans vs. SOFR + 350–375bps pre-2022), and software multiples compressed from 20x+ ARR to 6–10x ARR, creating technical overhang for prior-vintage deals.

In 2025–2026, the deal environment normalized:

• LBO loan spreads compressed to ~SOFR + 400bps by Q3 2025 as the Fed cut rates three times.
• Software multiples stabilized in the public markets at 8–14x NTM revenue for quality SaaS names, creating a realistic bid-ask gap for PE acquirers.
• Strategic buyer competition (Big Tech) has moderated due to FTC scrutiny, reducing competitive tension on certain targets.

Notable 2025–2026 deals:

• Thoma Bravo's acquisition of Sailpoint (identity governance) for $6.9B — a re-privatization after Sailpoint had re-IPO'd in 2022.
• Vista's acquisition of Avalara (tax compliance software) completed in 2022, generating significant ARR growth under Vista's pricing discipline by 2025.
• EQT's take-private of IFS (industrial ERP) — European software roll-up at ~$10B valuation.

Most Likely Take-Private Candidates

PE targets in software share predictable characteristics:

• ARR $300M–$2B (large enough to absorb LBO debt, small enough to escape Big Tech's attention and FTC scrutiny)
• Net revenue retention >105% (existing customers expand usage, limiting dependence on new logo growth)
• Gross margin >70%
• Rule of 40 score <40 (underperforming on growth + profitability = PE sees operational upside)
• Fragmented competitive market (no single dominant competitor that would foreclose the moat)
• Mission-critical workflow (high switching cost, low churn)

Current candidates that screen positively (based on public filings and market data):

• Instructure (Canvas LMS, higher ed): ~$650M ARR, high NRR, fragmented competition.
• Alarm.com (smart home/security SaaS): ~$1B ARR, recurring, SMB/residential market.
• Qualys (cloud security/compliance): ~$550M ARR, 70%+ gross margin, EBITDA-positive.
• SolarWinds (IT management, post-SUNBURST): ARR stable at ~$750M, heavily discounted public multiple due to legacy breach overhang — classic PE value buy.

Valuation Framework: What Multiples PE Pays vs. Public Market

PE acquisition multiples in software (2025–2026 vintage):

PE firms pay a modest discount to public multiples (reflecting the illiquidity premium and leverage cost) but then improve EBITDA margins by 15–25 percentage points post-acquisition. At exit, they sell at a strategic premium — typically 15–25x EBITDA to a strategic buyer who values the revenue base at a premium to pure financial returns.

Exit Routes: Strategic Sale vs. IPO vs. Secondary

• Strategic sale (most common in 2024–2026): SAP, Salesforce, ServiceNow, Cisco, Broadcom, and IBM are all active acquirers of proven software businesses at $1–5B valuations. Strategic premiums of 30–50% over financial value are typical.
• Re-IPO: The IPO window for software reopened in H2 2025. Vista-backed Cvent and Thoma Bravo-backed Proofpoint are potential 2026 re-IPO candidates if public SaaS multiples hold.
• Secondary sale to another PE fund: Large buyouts (>$5B) often trade between PE sponsors when the original buyer has reached its holding period. Apollo, Blackstone, and Silver Lake compete for large secondary software deals.

Risks: Rate Environment, Competition from Strategics, Leverage Costs

• Rate sensitivity: A return to elevated rates would widen leveraged loan spreads and reduce the return multiple on debt-financed acquisitions. Current LBO models assume 6–7% all-in financing cost; a 150bps increase reduces IRR ~3–4 points.
• Strategic competition: Microsoft, Google, and Salesforce remain active acquirers, though FTC scrutiny under the current administration has lengthened deal timelines and increased remedies.
• Leverage quality: Covenant-lite debt structures mean lenders have fewer early warning mechanisms. A cyclical revenue decline in an over-leveraged portfolio company triggers crisis faster than in earlier LBO vintages.
• AI disruption: Vertical SaaS built on rule-based workflows (legal document review, tax compliance) is vulnerable to AI-native entrants. PE buyers must assess AI exposure at the niche level, not the category level.

Takeaways for Public Investors and Founders

• For public equity investors: Stocks that screen as PE take-private candidates (low Rule of 40 scores, high NRR, mission-critical workflows, depressed multiples) often outperform on M&A optionality alone. The 12-month period after a PE take-private announcement is typically preceded by a 20–30% share price run as the market assigns probability.
• For founders: PE-backed recapitalizations are now a mainstream exit path, not just for distressed situations. If your SaaS business has $100M+ ARR, >110% NRR, and flat growth, Vista or Thoma Bravo is a more realistic buyer than a FAANG acquirer.
• The cycle favors 2025–2027 vintages: Deal multiples are below peak, financing costs have moderated, and the exit window (strategic M&A + IPO) looks constructive. This vintage may generate 2.5–3.5x gross MOIC, comparable to the 2015–2018 vintage.