50 copier and managed IT dealers, 174 cybersecurity vendors, one rule for color and one rubric for voice. September 2026.

Dealers are red. Security is blue. The dealer that sells security is standing in both fields at once.

Copier dealers and security vendors now sell into the same office, often the same budget line. This report puts their brands side by side: the lead color of every company, the archetype its homepage speaks in, the words in its headline and the button it wants you to press. It is built so any company in the space, dealer, MSP or vendor, can see which lanes are crowded and which are empty.

32.0%of dealers lead with red. Blue is second at 22.0%.
35.6%of security vendors lead with blue. Red is fourth at 12.6%.
17 of 50dealers put security or protection in their homepage hero, next to copiers and print.
68.5%of vendors speak in Order or Ego (control, mastery). Dealers: 50.0%. Dealers speak Social at 28.0%; vendors at 6.0%.

The two fields, sorted by hue

One stripe per company, ordered around the color wheel from red through blue to magenta. Both strips use the same family rule (fixed hue arcs on HSL, near-neutrals set aside as grey), so they are comparable. Hover a stripe for the brand.

Copier and managed IT dealers50 measured
Cybersecurity vendors174 measured

Adjacent means MDR and MSSP, IT management platforms, endpoint, email security, awareness training, resilience and consumer AV: the categories a dealer either resells, competes with, or is compared to by an SMB buyer. 23 of the 57 lead with blue and 16 speak as Hero.

Share by color family

Counting each company once by its lead color. Pick a group; each bar is that group's share of a color. Red is the dealer default the way blue is the vendor default, and the dealer that picks blue to look like a security company walks into the most crowded lane in the adjacent field.

Red
Orange
Yellow
Green
Teal
Blue
Purple
Magenta
Grey

Track runs from 0 to 50%.

IT dealers lead their homepage with managed IT or security; copier dealers lead with copiers, print or office equipment; dual line dealers name both up front. The split is read from the title tag and H1, and is listed per company in the roster.

Yellow, orange and purple are thin on both sides. No dealer leads with purple. Green, which almost a fifth of vendors use, belongs to two dealers.

The dark anchor

Security sites have a reputation for dark backgrounds, and that should change what a lead color is doing. The vendor study found it does, but not in the expected direction: in a 44-company sample only 20% of homepages actually run dark, yet 67% of vendor palettes carry a near-black anchor regardless, and where that anchor has any hue at all, it is blue. Every vendor anchor is below, sorted from true neutral black to the most saturated blue-black.

neutral blackblue-black

117 anchors, 73 of them with visible hue. Even the black in this industry is blue.

47%of vendors pair a bright mid-lightness lead with a near-black: colors built to glow on dark.
30%use a deep saturated lead meant to sit as ink on white, the older navy convention.
10 of 50dealers use pure black as their dark; the rest use a navy or a deepened brand red. Dealer homepage backgrounds were not sampled.

Dark mode does not dilute the blue problem, it concentrates it. A dark page needs a bright accent, and bright blue is the accent this industry reaches for. For a dealer, the practical read is that a warm lead color on a light page is visually distinct from nearly every security vendor without having to change anything else.

Voice: who each field speaks as

Each company was assigned a primary archetype from the verbatim wording of its homepage hero, using the twelve-archetype wheel grouped into four quadrants by what the brand ultimately wants. Dealers were read from H1, subhead, H2s, CTAs and proof lines; vendors from H1 and CTA. Same rubric, same reader.

Order

provide structure to the world

30%dealers
39.3%security vendors
33.9%adjacent vendors

Freedom

yearn for paradise

22%dealers
25.6%security vendors
16.1%adjacent vendors

Ego

leave a mark on the world

20%dealers
29.2%security vendors
41.1%adjacent vendors

Social

connect to others

28%dealers
6%security vendors
8.9%adjacent vendors

Vendors promise control or a win: Ruler (46) and Hero (27) are the two largest vendor archetypes, and 9 of the 15 MDR providers are Hero. Dealers promise service and belonging: Caregiver (11) and Citizen (13) lead. When a dealer adds "cybersecurity" to a Caregiver homepage, the buyer hears a very different register from the vendor the dealer is reselling, which is either the dealer's advantage or its credibility gap depending on the buyer.

Dealers, share of 50Vendors, share of 168
RulerControl
6%27.4%
DEX Imaging, UBEO, Ray Morgan / Trend Micro, Bitdefender, LastPass
CaregiverService
22%7.7%
Applied Innovation (fka Applied Imaging), Gordon Flesch, Loffler / McAfee, KnowBe4, Norton
CreatorInnovation
2%4.2%
Cobb Technologies / Orca Security, Cloudflare, Semgrep
InnocentSafety
0%4.2%
no dealer / Avast, Invicti, Barracuda
SageKnowledge
20%16.1%
Marco, Flex Technology Group, Kelley Create / Intel 471, Egress, PortSwigger
ExplorerFreedom
2%5.4%
ImageNet Consulting / SOCRadar, Corelight, ZeroFox
HeroMastery
6%16.1%
Visual Edge IT, TGI Office Automation, Copiers Northwest / CrowdStrike, Dashlane, Rapid7
MagicianPower
10%10.7%
Impact Networking, Prosource, Blue Technologies / Tanium, Darktrace, Netskope
RebelLiberation
4%2.4%
AIS, Genesis Technologies / Bugcrowd, Twingate, Bishop Fox
LoverIntimacy
0%0%
no dealer / no vendor
JesterPleasure
2%0.6%
Fisher's Technology / Cohesity
CitizenBelonging
26%5.4%
Fraser AIS, Les Olson, Stargel / Hyperproof, Splunk, Webroot
What each archetype sounds like
Ruler Control

Wants order and authority. Promises command over a sprawling problem, usually through one platform that governs everything.

Caregiver Service

Wants to protect and look after. Promises you can stop worrying because someone else is holding it.

Creator Innovation

Wants to build something that lasts. Addresses builders and developers as the customer, not the security team.

Innocent Safety

Wants simplicity and trust. Promises ease and calm, and avoids the language of threat entirely.

Sage Knowledge

Wants truth. Promises evidence, visibility and understanding, and treats knowing as the thing that keeps you safe.

Explorer Freedom

Wants discovery. Promises to find what is hidden, and frames security as a search rather than a fight.

Hero Mastery

Wants to prove worth through courage. Names an adversary and promises to beat it. The most combative voice in the category.

Magician Power

Wants transformation. Promises the problem handled invisibly, at machine speed, without you touching it.

Rebel Liberation

Wants to overturn what is not working. Attacks a convention, an incumbent, or a tradeoff everyone else accepts.

Lover Intimacy

Wants closeness and beauty. Sells desire and relationship rather than protection. No brand in this set uses it.

Jester Pleasure

Wants to enjoy the moment. Uses humor and refuses to take the category as seriously as everyone else does.

Words and buttons

Dealer headlines, 47 with an H1

  • technology18
  • office13
  • solutions12
  • business11
  • services8
  • print8
  • managed8
  • document4
  • partner4
  • better3
  • printers3
  • copiers3

Vendor headlines, 168 with an H1

  • security29
  • platform15
  • secure13
  • agentic11
  • trust10
  • threats9
  • cyber8
  • enterprise7
  • protect7
  • protection6
  • identity6
  • cybersecurity6

Dealer headlines describe a category ("technology", "office", "solutions"). Vendor headlines describe a threat and a platform ("security", "threats", "attackers", "agentic"). Only four dealer H1s contain "secure" or "security"; the word is in the subhead, not the promise.

Dealer CTA models, sites using each of 50

  • contact or consult16
  • service portal (service, supplies, meters, support)15
  • free assessment, evaluation or health check8
  • let's talk, talk to, chat12
  • learn more18
  • request a quote5
  • schedule or book6
  • explore or view products15

Most dealer sites mix two models. The assessment offer is the managed IT playbook imported into copier sites and is the most consistent conversion pattern; the service portal is a retention design that tells a prospect the site is not for them.

Vendor primary CTA, most common of 168

  • get a demo21
  • request a demo17
  • get started11
  • book a demo8
  • learn more7
  • explore the platform6
  • schedule a demo5
  • start free trial4

"Demo" appears in 64 of 168 vendor CTAs. The vendor asks you to watch; the dealer asks you to let it look.

Open lanes

Lead color family against voice quadrant, all 218 scored companies. A cell is a lane. The number is the total occupying it; the small line splits dealers and vendors. Grey cells hold two or fewer companies in total and are the positions nobody has claimed. Hover a cell for the names.

Orderprovide structure to the worldFreedomyearn for paradiseEgoleave a mark on the worldSocialconnect to others
Red5 dealers 8 vendors2 dealers 5 vendors5 dealers 7 vendors4 dealers 1 vendors
Orange2 dealers 5 vendors0 dealers 6 vendors0 dealers 4 vendors2 dealers 2 vendors
Yellow0 dealers 2 vendors2 dealers 1 vendors0 dealers 2 vendors1 dealers 0 vendors
Green0 dealers 11 vendors1 dealers 8 vendors1 dealers 8 vendors0 dealers 2 vendors
Teal1 dealers 7 vendors3 dealers 4 vendors1 dealers 6 vendors1 dealers 1 vendors
Blue4 dealers 22 vendors2 dealers 16 vendors2 dealers 17 vendors3 dealers 4 vendors
Purple0 dealers 6 vendors0 dealers 2 vendors0 dealers 4 vendors0 dealers 0 vendors
Magenta3 dealers 4 vendors1 dealers 1 vendors0 dealers 1 vendors1 dealers 0 vendors
Grey0 dealers 1 vendors0 dealers 0 vendors1 dealers 0 vendors2 dealers 0 vendors

Reading it: blue crossed with Order or Ego is where a vendor looks like every other vendor, and red crossed with Order is where a dealer looks like every other dealer. Red plus Ego is already taken on both sides (five dealers, seven vendors), so a combative red brand is not the open move it looks like. What is open across the combined field is yellow in every quadrant but Freedom, purple and magenta outside Order, and Social in every color except red and orange. Switch to "Dealers only" and the empty cells multiply: no dealer leads with purple, no dealer is green or teal in Order, and Ego is thin in every warm color.

If you are

A copier dealer adding managed IT and security

You are probably red or blue, Caregiver or Citizen, with a tenure claim and an assessment CTA. So are most of your rivals.

  • Keep the Caregiver or Citizen voice; the vendor field cannot credibly copy it. Say it in the H1, not the subhead.
  • Do not switch to blue to look like a security company. Blue is the most crowded lane in both fields.
  • Replace tenure with an operating metric. Seven dealers publish response, uptime or NPS and they are the ones that read as serious.
  • Name the place. Three dealer H1s do. Geography is the buying criterion and nobody claims it.

An MSP or MDR provider selling to SMBs

Your category is Hero and blue or green. The dealer you compete with for the same office is Caregiver and red.

  • Hero works against enterprise rivals; it reads as noise to an SMB owner who is not at war with anyone.
  • Citizen (Coro, Cynet, Graylog) is the underused vendor voice and it is the one that matches how SMBs already buy from dealers.
  • "Get a demo" assumes a security buyer. A dealer's "free assessment" assumes a business owner. Match the buyer, not the category.

A security vendor recruiting dealers as channel

Your partners speak Service and Belonging in red and blue. Your brand speaks Control and Mastery in blue and green.

  • Co-branded pages should let the dealer's voice lead; a Hero headline on a Caregiver site is the mismatch buyers notice first.
  • Warm-color partner programs are visually distinct from every other vendor logo wall on a dealer site.
  • Dealers convert on assessments. Give them an assessment offer, not a demo.

Roster

Method and confidence

Dealer set51 independent dealers that sell both office equipment and managed IT: 10 national or PE-backed platforms and 41 regional independents, weighted toward the Southeast and Texas. Palettes, fonts and logos from Brandfetch on 3 September 2026. Homepages fetched the same day; H1, subhead, H2s, CTAs and proof lines extracted from the HTML. 50 measured; Meritech's corrected domain (meritechinc.com) was unreachable and is unscored.

Vendor logos40 vendor marks are the inline Simple Icons paths from the original vendor study, drawn in the brand's lead color. 134 more were pulled from Brandfetch on 3 September 2026; 8 (Infoblox, Hunters, Ivanti, Mimecast, Cofense, WatchGuard, Ping Identity, Noname Security) hit the API quota and show a wordmark. 94 Brandfetch logos are white and sit on the brand's own anchor color.

Vendor set183 cybersecurity vendors across 23 segments, from platform incumbents to MDR providers, appsec startups and cyber insurers. Palettes from Brandfetch, gaps filled from published guidelines and the Simple Icons registry. 174 resolved; 9 had no retrievable palette and were dropped rather than guessed. Hero copy collected for 169; 168 assigned an archetype.

One color ruleBoth sets were re-classified here with the same rule: convert to HSL, set aside near-neutrals (saturation under 14% or lightness outside 7 to 93%), assign by fixed hue arc. This moves two dealers relative to the earlier dealer board (Systel's olive to yellow, Usherwood's gold to orange) and one vendor between blue and teal. Family-level percentages are solid; individual hex values can run more saturated than a company's published guideline.

Lead colorFor vendors, the first chromatic color in the palette. For dealers, Brandfetch's accent. These are close but not identical definitions, which matters for a handful of dealers whose accent is a secondary highlight.

Dealer typeIT dealer, copier dealer and dual line dealer describe what the homepage leads with, not the company's revenue mix. All 51 sell both. Assigned by hand from the title tag and H1: 9 IT, 19 copier, 22 dual line, Meritech unassigned.

ArchetypesInterpretation, not measurement. Everyman is labelled Citizen throughout to match the wheel in use. Dealers were read from more copy than vendors (proof lines and H2s were available), so dealer assignments carry slightly more evidence. A different analyst would move some brands one slot; the quadrant totals are robust to that.

Adjacent vendorsA judgement about which vendor categories an SMB buyer or a dealer actually meets: MDR/MSSP, IT management, endpoint, email security, awareness, resilience, consumer AV. Change the list and the adjacent numbers change; the all-vendor numbers do not.

Known soft spotsThree dealer domains now resolve to acquirers (Ray Morgan to UBEO; ESI and Zeno to Xerox Business Solutions) and inherit those brands. Saviynt's #00FF00 is likely an extraction artifact. Splunk and Trellix use gradients that resist a single primary. Dealer sites with rotating heroes were scored on the first slide.