In 2018, a digital marketing agency in Dallas lost its largest client — a regional healthcare system that represented 34% of annual revenue. The contract was not terminated for cause. The healthcare system merged with a larger group that had an existing agency relationship. The decision took two weeks. The impact lasted two years.

The agency laid off seven of twenty-three employees within 90 days. Revenue dropped 34% in a single quarter with no time to replace it. The remaining clients — the 66% that represented a healthy, diversified base — continued to perform. But the business had been structured around the capacity needed for the healthcare client: office space, staffing levels, tools, and overhead. All of it was sized for a revenue level that no longer existed.

Customer concentration is the most common and most preventable strategic risk in business. It exists in nearly every company at some point. The companies that address it survive. The ones that don't are one phone call away from crisis.

No founder sets out to build a concentrated business. Concentration develops organically, and it develops for rational reasons. A large client arrives. The revenue is significant. The founder allocates resources — hiring staff, expanding capacity, investing in capabilities to serve the account. The client grows. The founder allocates more resources. The client becomes the largest account, then the dominant account, then the account the entire business orbits around.

At each stage, the decision to invest in the account was correct in isolation. The large client was profitable, growing, and satisfied. The resources allocated to the account were productive. The risk was diffused in the daily reality of serving a good client well.

But concentration risk is not a daily risk. It is an event risk — a risk that exists at a background level until a single event triggers it. The client is acquired. The client hires an internal team. The client's budget is cut. The client's procurement department runs a competitive review. Each of these events is predictable in aggregate and unpredictable in timing — which means the risk is always present but never urgent.

Until it is.

Most business advisors define dangerous concentration as any single client representing more than 15% to 20% of revenue. At 15%, losing the client is painful but survivable. At 20%, it requires significant restructuring. At 30% or above, it threatens the viability of the business.

The concentration threshold also affects the business's strategic options. A business attempting to raise capital, take on a partner, or sell will find that concentration above 20% reduces valuation, limits buyer interest, and increases the cost of capital. Investors and acquirers price concentration risk directly — and they price it heavily.

A business generating $5 million in revenue with no client above 10% might command a 5x multiple. The same business with one client at 35% might struggle to achieve 3x. The revenue is identical. The risk is different. And the risk determines the price.

Reducing concentration is not a defensive measure. It is a strategic initiative — one that strengthens the business across every dimension.

The first step is visibility. Many businesses do not track customer concentration in any formal way. The founder knows who the big clients are but has never calculated the exact percentages. Running the calculation — revenue by client as a percentage of total revenue, reviewed quarterly — makes the risk visible. And visibility changes behavior.

The second step is capacity reallocation. If the top client consumes 30% of the team's capacity, some of that capacity is being underutilized on the client's quieter months. Reallocating even 10% of that capacity to business development creates pipeline for new clients without reducing service quality for the existing one.

The third step is strategic targeting. Not all new clients reduce concentration equally. A business with one client at 35% and nineteen clients at 3.4% each needs mid-sized clients — accounts large enough to grow to 8% or 10% of revenue over time, creating multiple pillars instead of one column.

The fourth step is contractual protection. Long-term contracts with termination notice requirements — minimum 90 days, ideally 180 — provide a buffer if the large client decides to leave. The buffer does not prevent the loss. It provides time to respond to it.

Diversification sometimes means saying no to additional work from the dominant client. This is the conversation founders avoid — because the revenue is attractive, the relationship is strong, and the work is already scoped. Turning it down feels like leaving money on the table.

It is. But it is also reducing a risk that, when it materializes, costs far more than the revenue it generated. The founder who says to a 30% client, "We'd love to take on this additional project, but we need to bring in a subcontractor to handle part of it" is managing concentration in real time — without damaging the relationship or refusing the work.

Customer concentration is the strategic risk that looks like success until it doesn't. A large, growing, satisfied client is not a problem. A large, growing, satisfied client that represents a third of revenue is a dependency. Recognizing the difference — and acting on it — is the work of a founder who thinks about the business that survives, not just the business that grows.