#56: The False Security of Recurring Revenue

Chip Royce, Flywheel Advisors


Recurring revenue is supposed to make a business more stable. In complex mid-market and enterprise sales, the operating model often does the exact opposite. It makes the CEO overestimate the resilience of the installed base.

Public markets have already watched this movie play out. In 2017, Twilio looked like a model of sticky, usage-based recurring revenue, right up until Uber—then roughly 12% of Twilio’s revenue—began moving traffic off the platform. This move forced a guidance cut and wiped out about 30% of Twilio’s market value in a single session. More recently, Okta reported dollar‑based net retention still around 106% while working through repeated high‑profile security incidents. It is a clear reminder that recurring metrics can stay green while trust is being actively renegotiated.

You don’t have a customer success problem

gemini generated image xkb9hdxkb9hdxkb9

When you sell meaningful technology into accounts that require executive access and multi-threaded relationships, the contract is only one layer of stability. The deeper layer is whether the customer would still choose you again under fresh scrutiny.

Most recurring revenue businesses are built to win the customer with human intensity, and then they attempt to keep the customer with process. Senior leaders show up before the signature. The attention is high, and the commercial context is rich. After the deal closes, the relationship gets handed into an operating model designed primarily for consistency and coverage.

Consider a familiar pattern. A global SaaS infrastructure vendor wins a mid‑six‑figure deal with a Fortune 500 logistics company. They secure the win after months of CEO‑to‑CIO meetings, white‑boarding sessions with the head of operations, and a board‑level conversation about risk. For the customer, the relationship starts as a strategic bet on a partner. Within twelve months of go‑live, the vendor’s executive team has largely disappeared from the account. The primary touchpoint is now a rotating cast of customer success managers running a quarterly deck, working through a ticket queue, and pushing standardized checklists.

Nothing officially breaks in this scenario. The service level agreements are hit, and the software functions as expected. But the people who originally put their name on the deal no longer feel like they are in a live commercial conversation with the company. They feel like they are in a system. The relationship did not collapse; it simply became operationalized.

Confusing Process Quality With Relationship Quality

A clean onboarding sequence does not prove trust. A completed success plan does not prove relevance. A healthy usage graph does not prove that you still have executive sponsorship. Workflow compliance can tell you the motions are happening, but it cannot tell you whether the customer feels politically safe backing you internally.

This is where recurring revenue language begins to sanitize deterioration. If an account retained 60% of its value, many operational teams report that the account was largely preserved. Commercially, the company just lost 40% of its footprint. If gross retention holds and net retention stays acceptable because a few accounts expanded heavily, leadership can easily talk themselves into believing the base is sound.

You can see this distortion clearly in public metrics. Between early 2022 and early 2023, Twilio’s active customer accounts climbed from roughly 268,000 to more than 300,000, and top-line revenue kept growing. On paper, that looked like a strong, expanding base. Over the same period, however, Twilio’s dollar‑based net expansion rate fell from roughly 127% to 106%, and by the end of 2023 it was hovering around 102%. You could tell yourself that customers were largely retained, while the actual incremental growth from the installed base had quietly been cut to a fraction of what it used to be. Okta experienced a similar trajectory. Their net retention drifted down from around 117% to about 106% over the last couple of years while revenue and large‑customer counts still grew.

Dashboards Hide Reality

When go-to-market systems rely entirely on these aggregated metrics, dashboards become a comfort object for the executive team. They mask a much more complicated reality on the ground.

Okta’s recent history demonstrates this dynamic perfectly. After multiple security incidents in 2022 and 2023, analysts flagged reputational risk and customers publicly voiced their concerns. Yet in the quarters that followed, Okta continued to report double‑digit revenue growth, positive free cash flow, and solid retention. Management noted that the financial fallout from the incident had been very minimal. If you only looked at retention, remaining performance obligations, and revenue, you could easily convince yourself the base was solid. You would miss the fact that the nature of the conversations with Chief Information Security Officers had fundamentally changed.

The reporting says the book is healthy enough. Renewal coverage looks solid, and churn is tolerable. But underneath that dashboard, executive sponsors have drifted away. No new stakeholders are entering the relationship, and the customer has stopped volunteering strategic context. The account is still there, but its depth is entirely gone. Leadership sees retention, but they miss the thinning.

The First Sign of Customer Neglect

That missing depth matters because the first sign of customer neglect is rarely immediate churn. It shows up earlier, in ways that go-to-market systems are poorly designed to catch. Expansion gets harder. Advocacy gets thinner. Procurement gains leverage. Renewals become administrative events instead of commercial affirmations.

When a shock finally hits the system, the delayed consequence is severe. Twilio’s relationship with Uber is the classic visible example of delayed consequences. For years, Uber was a fast‑growing, mission‑critical customer on a recurring usage model. The underlying fragility only showed up later, when Uber decided to reduce its use of Twilio and move portions of its communications stack in‑house. Nothing sudden happened in the customer’s world that day. The relationship had been getting narrower and more price‑sensitive for some time, but the economic consequence for the vendor arrived all at once. The account looked perfectly safe right up until the moment Uber actually moved. By then the vendor had very little political capital left inside the customer to defend the original footprint.

When this quiet weakness in the base finally shows up in the numbers, the commercial impact is immediate and punishing.As Twilio’s dollar‑based net expansion rate slid from the high-130s in 2020 down toward 102% by the end of 2023, investors punished the stock with a roughly 14–15% one‑day drop after its Q4 2023 report. From the outside, those are just a few percentage points of retention. In dollar terms, they represent hundreds of millions of recurring revenue that used to show up automatically from existing accounts. Okta faced similar hard costs, including a $60 million cash settlement with shareholders over its 2022 breach disclosures. This represents the accumulated cost of eroding trust while revenue was still growing.

Feeling Busy and Stable

This is why plateau-stage companies can feel busy and stable at the exact same time. The installed base is not collapsing, so the danger seems containable. But the operational physics are getting worse. The company has to replace the quiet weakness in the base with intense new logo pressure, higher acquisition spend, or unsustainable founder-led deal heroics. Leadership behavior becomes a patch for a broken go-to-market design.

Modern go-to-market tools often make this structural flaw easier to miss. Companies have more touchpoints, more health signals, and more workflow visibility than ever before. But more telemetry does not mean more trust. Sometimes the tech stack simply increases the distance between the vendor and the buyer, while making the executive team feel highly informed.

Renew Trust, Relevance and Relationship Depth

In complex B2B environments, stability is not created by recurring billing alone. It is created when trust, relevance, and relationship depth are continuously renewed. A stable recurring revenue business is not one with tidy dashboards and orderly renewals. It is one where key customers remain commercially alive, multi-threaded, advocated for, and still worth defending inside their own walls.

If your installed base looks safer in your reporting than it feels in live commercial reality, you do not have a customer success problem. You have a go-to-market diagnosis problem.

If your forecast is softening and the standard explanations no longer match the numbers you see, let’s compare notes. The issue is often less dramatic than churn, and much more dangerous because of it.


Is Your Installed Base Actually Stable, or Merely Renewing?

This is for B2B tech CEOs selling complex solutions into mid-market and enterprise accounts where GRR and “green” health dashboards can stay calm while executive access, expansion pull, and internal advocacy quietly thin out.

If you want an operator’s read on whether your recurring revenue story matches the real commercial reality inside your top accounts, we should talk.


FAQs: The False Security of Recurring Revenue Business Models for SaaS

What do you mean by “false security” in recurring revenue?

In complex B2B sales, recurring revenue can make the business look steady while the underlying commercial relationship gets thinner. You still collect invoices and you still forecast renewals, but the customer is no longer expanding, advocating, or involving executives. The contract keeps recurring, while the relationship turns into something more passive and more price-sensitive.

How can our dashboards show “green” if the account is weakening?

Most dashboards measure operational visibility, not commercial intimacy. They can tell you usage, ticket volume, meeting cadence, and renewal stage, but they cannot tell you whether the customer still trusts you under pressure, whether you still have executive sponsorship, or whether the internal champion still has political capital. A “healthy” score often means “nothing is on fire,” not “this customer would buy again tomorrow.

If churn is low, what are the early warning signs of retention churn we should watch for?

In complex accounts, weakness shows up first in second-order signals. Expansion opportunities stop materializing. Executive access fades after signature. New stakeholders do not enter the relationship. Advocacy disappears, meaning nobody wants to be the person who recommends you to another team. The account can renew on time and still be quietly decaying.

Why does champion turnover hit some accounts like a surprise?

Accounts are often fragile before the champion left. If one person carries the relationship, the business relationship is not resilient. When that person changes roles or loses influence, the vendor discovers they do not have enough trust built across the account to defend the spend. The account can go from “stable” to “at risk” in a single quarter, even though the weakening started much earlier.

<!-- LinkedIn Insight Tag -->