diff --git a/cid-redirects.json b/cid-redirects.json
index a6e541ea2db..e7c19d63e7f 100644
--- a/cid-redirects.json
+++ b/cid-redirects.json
@@ -3028,6 +3028,7 @@
"/cid/1154": "/docs/send-data/hosted-collectors/krutrim-object-storage",
"/cid/1159": "/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/openai-source",
"/cid/1158": "/docs/send-data/opentelemetry-collector/data-source-configurations/windows-active-directory-inventory",
+ "/cid/1161": "/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/stix-taxii-2-client-source",
"/release-notes-collector/2026/04/11/hosted/": "/release-notes-collector/2026/05/11/hosted/",
"/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/armis-api-source": "/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/armis-source",
"/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/confluent-cloud-metrics-source/": "/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/confluent-metrics-source/",
diff --git a/docs/security/threat-intelligence/about-threat-intelligence.md b/docs/security/threat-intelligence/about-threat-intelligence.md
index a758ae35858..3c3e22cd1e6 100644
--- a/docs/security/threat-intelligence/about-threat-intelligence.md
+++ b/docs/security/threat-intelligence/about-threat-intelligence.md
@@ -73,6 +73,16 @@ A Cloud SIEM administrator must first ingest the indicators before they can be u
* [Mandiant Threat Intel Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source)
* [STIX/TAXII 1 Client Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/stix-taxii-1-client-source)
* [STIX/TAXII 2 Client Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/stix-taxii-2-client-source)
+ :::info
+ Sumo Logic provides the following vendor-specific sources, based on the STIX/TAXII 2 Client Source, to simplify setup:
+ * CISA TAXII Client
+ * Dragos TAXII Client
+ * Nozomi TAXII Client
+ * Recorded Future TAXII Client
+ * Unit42 TAXII Client
+
+ [Learn more](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/stix-taxii-2-client-source/#taxii-2-sources)
+ :::
* [ZeroFox Threat Intel Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/zerofox-intel-source)
* **Upload**. Manually upload files that add threat intelligence indicators. See [Add indicators in Threat Intelligence](/docs/security/threat-intelligence/threat-intelligence-indicators/#upload). See [Upload formats](/docs/security/threat-intelligence/upload-formats/) for the format to use when uploading indicators using this option or APIs.
* **The API**. See the following APIs in the [Threat Intel Ingest Management](https://api.sumologic.com/docs/#tag/threatIntelIngest) API resource:
diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/stix-taxii-2-client-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/stix-taxii-2-client-source.md
index 9d6590406f0..4e83f93083e 100644
--- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/stix-taxii-2-client-source.md
+++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/stix-taxii-2-client-source.md
@@ -77,7 +77,6 @@ Sumo Logic provides the following sources based on the underlying code of our ST
* Dragos TAXII Client
* Nozomi TAXII Client
* Recorded Future TAXII Client
-* SOCRadar TAXII Client
* Unit42 TAXII Client
When you set up a source, search for "taxii" and select the tile for the source you want to install:
})