Fund Structures and LP Dynamics

06d explains how a sponsor runs an asset; 06e works the return math; 06h reads the hold-and-exit clock on a single company. This section covers the fund itself, because a fund's structure, age, and the demands of its limited partners largely determine whether a sponsor is buying or selling in a given year.

In June 2025, Thoma Bravo closed $34.4B across three vehicles in a single fundraise: Fund XVI at $24.3B (the largest technology-focused buyout fund ever raised), Discover Fund V at $8.1B, and a first dedicated Europe Fund at ~€1.8B (Thoma Bravo, PitchBook). That $34.4B of fresh commitments, sitting inside funds with a ~5-year clock to deploy, is a structural reason the consolidation engine continues through a soft tape.

The structure in one paragraph

A buyout fund is a closed-end partnership between a General Partner (the PE firm, which makes the decisions) and Limited Partners (the institutions that supply ~99% of the capital). Standard economics are "2 and 20": a ~2% annual management fee (on committed capital during the investment period, then on invested capital), and 20% carried interest on profits above a preferred return / hurdle of typically ~8%. The GP itself commits ~1–5% of the fund so its skin is in the game. The fund has a ~10-year life (often +1+1 extensions), split into a ~5-year investment period (when it buys) and a ~5-year harvest period (when it sells). Capital is called from LPs deal by deal, not taken up front. Much of sponsor behavior follows from these mechanics.

Who the LPs are

The capital behind cyber buyouts comes from a recognizable institutional base. Thoma Bravo's 2025 funds drew from "sovereign wealth funds, public pension funds, multinational corporations, insurance companies, fund-of-funds, endowments, foundations and family offices" (Thoma Bravo). Each LP type behaves differently, and that behavior transmits straight into deal pace:

The throughline for 2026 is DPI — distributions to paid-in capital, i.e., actual cash returned. LPs have shifted from rewarding paper marks to demanding realized cash, and DPI has become the defining fundraising metric of the cycle (McKinsey). The pressure is real: the last U.S. vintage year to return a full 1.0× DPI was 2016, and distributions have been sluggish for years (Deloitte). That single fact is the engine behind the continuation-vehicle and secondaries boom on 06h: when normal exits stall, GPs manufacture liquidity to keep DPI flowing — because the next fund's fundraise depends on it.

The fund-family architecture

Mega-managers don't run one fund; they run a family of funds segmented by check size, and that segmentation indicates which fund can buy which asset. Thoma Bravo's 2025 raise is the clearest example:

Vista runs the same logic with Flagship / Foundation / Endeavor / Perennial strategies plus credit (06b); KKR, Permira, and the rest segment similarly (06c). A $3B-EV cyber platform maps to a Fund XVI / Flagship mandate; a $300M founder-owned MSSP maps to a Discover / Foundation / Endeavor mandate.

The two clocks the structure creates

Fund structure produces exactly two timing pressures, and together they govern the entire deal cycle:

• The deployment clock (investment period, ~years 1–5). A fund that has raised capital must put it to work or return it — and managers do not like returning fees. With ~$3.7T of global PE dry powder at the start of 2026 (buyout alone >$1.1T), there is enormous structural pressure to deploy (S&P Global). A freshly closed fund is a buyer by mandate — this is the single best predictor that a sponsor's platforms will be acquisitive.
• The realization clock (harvest period + DPI demand). As a fund ages past ~year 5, and as LPs press for cash, the same sponsor flips to seller — via the four routes on 06h. DPI pressure has made this clock louder than ever, which is why continuation vehicles and secondaries (~$226B in 2025, +41% YoY) have become structural rather than exceptional (William Blair).

Fundraising itself has concentrated these clocks into fewer hands. Aggregate dollars raised rose ~9% in H1 2026 even as the number of funds fell — a shrinking set of established managers is capturing a growing share of commitments, and funds now take ~22 months on average to close versus ~14 months a decade ago (McKinsey, PwC). The capital is pooling in the Thoma Bravos and Vistas — exactly the serial acquirers most relevant to a cyber buy-side practice.

The falsifiable bear case

The structural-tailwind read — "record dry powder + deployment clocks = a guaranteed wave of cyber buying" — breaks if the DPI freeze starves the next fundraise. Dry powder is committed, not infinite, and it expires: capital not deployed in the investment period gets returned, and capital not returned to LPs (low DPI) chokes off the next vintage. If 2026's distribution drought persists, LPs stop re-upping, mega-funds shrink at the next raise, and the deployment clock the bulls are counting on simply doesn't get wound again. In that world the dry powder gets conserved rather than spent — GPs hoard for their best assets and defer bolt-ons — and the continuation-vehicle boom reveals itself as a liquidity patch papering over an exit freeze rather than evidence of a healthy machine (CAIA). The tell to watch: if 2026 fund closings keep shrinking in number while DPI stays below ~0.5× for recent vintages, the deployment engine is running on a tank that isn't being refilled.

→ Cross-references: Private Equity, Thoma Bravo, Vista, The Sponsor Landscape, Operating Model & Mechanics, Buy-and-Build Math, Hold Periods & Exit Timing, Lenders & Private Credit, Buy-Side Prospect Framework, Deal Structures & Exits.

Updated 2026-08-16 18:13 UTC · © El Dorado Capital · el-doradocapital.com · Market intelligence for informational purposes only; not investment advice.