When one customer is 40 percent of your revenue, you are not running a business. You are running a contract that has not been cancelled yet. Customer concentration is the single most under-monitored existential risk in SMEs. The fix is measurable, monitorable and fixable if you catch it early.
Customer concentration risk is the percentage of revenue dependent on a single customer or a top few. The 25% rule (top-1 customer above 25% of revenue) is the practical threshold above which the business becomes structurally fragile. Real-time monitoring tracks top-1 share, top-3 share, the Herfindahl-Hirschman Index (HHI) and five leading indicators (payment timing drift, order frequency decline, engagement drop, procurement involvement, internal-capability hiring at the customer). The fix is automated monitoring plus a structured action protocol for each threshold breach. Setup takes under a day with a connected accounting integration.
Customer concentration risk is the simplest existential risk an SME carries and the one most often misread until the event happens. When a top customer leaves, the revenue gap is rarely the headline cost. The headline cost is the operational overhead built around serving that customer: people hired, infrastructure built, processes shaped. Losing a 40% customer often forces a 50% reduction in headcount because the cost base was sized for the larger company you used to be.
This guide covers the practical layer: how concentration risk is actually measured, what thresholds matter, the leading indicators that a top customer is about to leave, and the monitoring setup that catches concentration drift before it becomes a crisis.
Three measurements are worth knowing.
Most business advisors and PE buyers use 25% revenue from a single customer as the threshold above which concentration risk becomes a deal-breaker. Below 25% is generally tolerable. Above 25% is a discount on valuation and a flag in any sale process.
Top-3 customers as a share of total revenue. Below 30% is healthy. 30 to 50% needs active management. Above 50% means the business is functionally a portfolio of three relationships rather than a diversified company.
A more precise concentration measure used in antitrust and economics. Calculated as the sum of squared market shares (as percentages, so a customer at 30% contributes 900). HHI below 1,500 is unconcentrated. 1,500 to 2,500 is moderately concentrated. Above 2,500 is highly concentrated. For SMEs, calculating monthly HHI and tracking the trend matters more than the absolute number.
| Concentration profile | Top customer % | Top 3 % | HHI range |
|---|---|---|---|
| Healthy | Under 15% | Under 30% | Under 1,500 |
| Manageable | 15 to 25% | 30 to 45% | 1,500 to 2,500 |
| High risk | 25 to 40% | 45 to 60% | 2,500 to 4,000 |
| Existential risk | Above 40% | Above 60% | Above 4,000 |
Customers rarely leave without warning. The challenge is that the warning signals are scattered across multiple systems and rarely surface as a single alert. The five that matter most:
A customer that historically paid in 28 days starts paying in 38, then 45. This is the strongest leading indicator. It usually means one of three things: the customer has cash flow problems, the customer is shopping for alternatives or the customer is dissatisfied and creating friction. Any of the three is bad.
For recurring services, slower-than-usual renewal conversations. For product orders, gaps that exceed the normal cadence. A monthly customer that goes 7 weeks between orders without explanation is 60% likely to be in active alternative-evaluation.
Fewer support tickets, fewer feature requests, shorter quarterly review meetings, reduced executive engagement. Engagement drop usually precedes departure by 3 to 6 months.
When a customer's procurement team gets involved in renewals where they were not previously involved, it usually means an RFP is coming. Procurement involvement is a 2 to 4 month lead time on contract renegotiation or churn.
The customer posts a job for a role that would replace what your service does. Internal capability building. This is a 6 to 12 month lead time but it is the most reliable.
Concentration risk is one of the few risks where the monitoring math is straightforward because the inputs are all internal.
Pull invoiced revenue by customer for the trailing 12 months. Calculate top-1 share, top-3 share and HHI. Track the trend. The trend matters more than any single month.
Define critical thresholds for your business. A reasonable default: alert when top-1 exceeds 30%, when top-3 exceeds 55%, when HHI rises above 3,000. Calibrate to your industry. SaaS tolerates lower concentration than consultancy.
For each top-10 customer, track average days-to-payment trailing 6 months. Alert if a customer's payment timing drifts more than 7 days from their personal baseline. This is the strongest leading indicator.
Track support ticket volume, meeting frequency or service usage for top customers. Alert on declines of more than 30% versus baseline.
Monitor your top customers' LinkedIn pages and job boards for hiring that would replace your service. Competitor monitoring platforms often include this as a side capability.
Treating concentration as a static measurement. One annual calculation is not monitoring. The trend matters more than the absolute number. A business at 30% concentration trending down is healthier than a business at 22% trending up.
Confusing revenue with profit concentration. A top customer at 40% of revenue but 20% of profit is much less risky than a top customer at 30% of revenue and 60% of profit. Calculate concentration on profit too.
Ignoring the operational cost of the top customer. A 40% customer often requires 50 to 60% of operational attention. If they leave, the cost base does not drop proportionally. Build a quarterly "what would happen if this customer left tomorrow" scenario for the top-3.
When concentration crosses a threshold or a leading indicator fires, the response sequence:
Top-1 above 30% threshold: dedicated pipeline-building effort in the next quarter, with a target of bringing top-1 below 25% within 4 quarters. Specific metric to track is "second-customer ratio": revenue from customer #2 divided by revenue from customer #1. Healthy is 0.5 or higher.
Payment timing alert: a structured check-in conversation with the customer's day-to-day contact within 2 weeks. Not a sales conversation. A relationship conversation: "we have noticed X, is there anything we should be aware of". Most of the time the answer is benign and saying nothing is worse than asking.
Engagement alert: schedule a strategic review meeting with the customer's economic buyer in the next 30 days. Use it to surface friction before the renewal becomes a contested decision.
Hiring/RFP signal: assume churn is in motion and accelerate replacement-pipeline development. Do not wait for confirmation.
Same way as for product businesses: invoiced revenue trailing 12 months. The structure of the contract (retainer vs project) does not change the concentration math. The risk is the same.
Partially. A 3-year contract with auto-renewal reduces near-term risk but does not eliminate it. The contract can be terminated for cause and most large customers know this. Treat a multi-year contract as risk-deferral rather than risk-elimination.
Large enterprises change suppliers more often than SME owners assume. Procurement organisations regularly review and rotate supplier panels. The size of the customer does not reduce concentration risk; it changes the nature of the risk from sudden death to slow attrition.
No. Turning down revenue is rarely the right answer. The right answer is to grow other customers faster so that the new large customer becomes a smaller percentage of total revenue within 12 to 18 months.
Most PE buyers will apply a discount of 1 to 3 turns on EBITDA multiple for any customer above 20% concentration. Above 30% concentration the deal often does not close at all unless there are mitigating factors (very long contract, switching costs, regulatory lock-in).
Concentration thresholds vary by industry. The benchmarks here are general guidance; specific industries (defence contracting, specialised consulting) can sustain higher concentration with longer customer relationships.
Tell us about your business and we will show you a personalised demo. No commitment required.
Live AI intelligence on WhatsApp. Real-time market signals, financial health and prioritised actions for SME owners.
Start free trial →