diff --git a/calico-cloud/get-started/checklist.mdx b/calico-cloud/get-started/checklist.mdx
index 7186a494f5..ffc8f7f378 100644
--- a/calico-cloud/get-started/checklist.mdx
+++ b/calico-cloud/get-started/checklist.mdx
@@ -20,7 +20,7 @@ kubectl get installer default --namespace calico-cloud -o jsonpath --template '{
 {"clusterName":"my-new-cluster","state":"installing"}
 ```
 
-After `state` is `complete`, $[prodname] is properly installed.
+After `state` is `done`, $[prodname] is properly installed.
 
 ## Check logs for fatal errors
 
diff --git a/calico-cloud_versioned_docs/version-24-1/get-started/system-requirements.mdx b/calico-cloud_versioned_docs/version-24-1/get-started/system-requirements.mdx
index 75baaeddc5..1e7bd9b176 100644
--- a/calico-cloud_versioned_docs/version-24-1/get-started/system-requirements.mdx
+++ b/calico-cloud_versioned_docs/version-24-1/get-started/system-requirements.mdx
@@ -48,6 +48,7 @@ To install Calico Cloud $[cloudUserVersion], your Kubernetes distribution must b
 
   | Calico Cloud version | Kubernetes versions |
   |-----------------------|---------------------|
+  | 24.0.0               | 1.34-1.36          |
   | 23.0.0               | 1.34-1.36          |
   | 22.5.0               | 1.31-1.35          |
   | 22.4.1               | 1.31-1.35          |
diff --git a/data/feature-status.yaml b/data/feature-status.yaml
index 644ad55347..c2804f9580 100644
--- a/data/feature-status.yaml
+++ b/data/feature-status.yaml
@@ -52,6 +52,13 @@ features:
         "3.20": deprecated
         "3.24": removed
 
+  - id: container-threat-detection
+    name: Container threat detection
+    products:
+      calico-cloud:
+        "3.21": deprecated
+        "3.23": removed
+
   - id: custom-dashboards
     name: Custom dashboards
     products:
@@ -100,6 +107,13 @@ features:
       calico-cloud:
         "3.22": tech-preview
 
+  - id: image-assurance
+    name: Image Assurance
+    products:
+      calico-cloud:
+        "3.21": deprecated
+        "3.23": removed
+
   - id: istio-ambient-mode
     name: Istio ambient mode
     products:
@@ -110,6 +124,14 @@ features:
       calico-cloud:
         "3.22": tech-preview
 
+  - id: kibana
+    name: Kibana
+    products:
+      calico-cloud:
+        # Deprecated in the February 5, 2026 web console update, during Calico Cloud 22.
+        "3.22": deprecated
+        "3.23": removed
+
   - id: kubevirt-live-migration
     name: Live migration for KubeVirt VMs
     products:
diff --git a/docusaurus.config.js b/docusaurus.config.js
index 93321d77c3..2368378795 100644
--- a/docusaurus.config.js
+++ b/docusaurus.config.js
@@ -512,14 +512,14 @@ export default async function createAsyncConfig() {
           routeBasePath: 'calico-cloud',
           editCurrentVersion: true,
           //To see builds for unreleased versions, remove comments in the next line.
-          onlyIncludeVersions: [...nextVersion, '23-2'],
+          onlyIncludeVersions: [...nextVersion, '24-1'],
           versions: {
             current: {
               label: 'Next',
               path: 'next',
               banner: 'unreleased',
             },
-            '23-2': {
+            '24-1': {
               path: '/',
               banner: 'none',
             },
@@ -578,7 +578,7 @@ export default async function createAsyncConfig() {
           // Docusaurus version names are navigation labels. Where a product has a
           // user-facing version that differs, name the variables.js key holding it
           // so frontmatter reports something a reader can corroborate. Calico Cloud's
-          // Docusaurus label is "23-2", which appears in no URL and no dropdown.
+          // Docusaurus label is "24-1", which appears in no URL and no dropdown.
           versionVariables: {
             'calico-cloud': 'cloudUserVersion',
           },
diff --git a/src/___new___/components/VersionedCloudImageList/index.js b/src/___new___/components/VersionedCloudImageList/index.js
index 3fcb9385d8..3c6634d849 100644
--- a/src/___new___/components/VersionedCloudImageList/index.js
+++ b/src/___new___/components/VersionedCloudImageList/index.js
@@ -4,6 +4,10 @@ import CodeBlock from '@theme/CodeBlock';
 import variables from '../../../../calico-cloud/variables';
 import ccImageLists from '../../data/ccImageLists';
 
+// ccImageLists keys are the Calico Cloud version labels shown in the selector (for example, "v23.0.2 (latest)").
+// cc-operator is tagged per Calico Cloud version, so derive the operator image tag by stripping the optional "(latest)" suffix.
+const operatorTag = (versionLabel) => versionLabel.replace(/\s*\(latest\)\s*$/, '').trim();
+
 const CodeBlockSelector = () => {
   const [selectedVersion, setSelectedVersion] = useState(Object.keys(ccImageLists)[0]);
 
@@ -41,13 +45,11 @@ const CodeBlockSelector = () => {
         </Select>
       </FormControl>
       <CodeBlock
-        title={`Helm command to add images for Calico Cloud ${selectedVersion}`}
-        language='javascript'
+        title={`Images for Calico Cloud ${selectedVersion}`}
+        language='bash'
       >
-        {`helm repo add calico-cloud ${variables.clouddownloadbase}/charts
-INSTALLER_IMAGE="${variables.cloudoperatorimage}:$(helm show chart calico-cloud/calico-cloud | grep version: | sed -e 's/version: *//' -e 's/+/-g/')"
-IMAGES=(
-$INSTALLER_IMAGE
+        {`IMAGES=(
+${variables.cloudoperatorimage}:${operatorTag(selectedVersion)}
 ${ccImageLists[selectedVersion]}
 )`}
       </CodeBlock>
diff --git a/src/___new___/data/ccImageLists.js b/src/___new___/data/ccImageLists.js
index d40e6808e3..fd4289ceb0 100644
--- a/src/___new___/data/ccImageLists.js
+++ b/src/___new___/data/ccImageLists.js
@@ -1,6 +1,41 @@
 const ccImageLists = {
+  // curl -0 https://installer.calicocloud.io/manifests/v3.24.0-1.0-4/image-list
+  'v24.0.0 (latest)': `quay.io/calico/istio-pilot:v3.32.0
+quay.io/calico/istio-install-cni:v3.32.0
+quay.io/calico/istio-ztunnel:v3.32.0
+quay.io/calico/istio-proxyv2:v3.32.0
+quay.io/calico/webhooks:v3.32.0
+quay.io/tigera/calico:v3.24.0-1.0
+quay.io/tigera/compliance-benchmarker:v3.24.0-1.0
+quay.io/tigera/deep-packet-inspection:v3.24.0-1.0
+quay.io/tigera/fluentd:v3.24.0-1.0
+quay.io/tigera/fluentd-windows:v3.24.0-1.0
+quay.io/tigera/intrusion-detection-controller:v3.24.0-1.0
+quay.io/tigera/manager:v3.24.0-1.0
+quay.io/tigera/egress-gateway:v3.24.0-1.0
+quay.io/tigera/gateway-l7-collector:v3.24.0-1.0
+quay.io/tigera/envoy:v3.24.0-1.0
+quay.io/tigera/dikastes:v3.24.0-1.0
+quay.io/tigera/prometheus:v3.24.0-1.0
+quay.io/tigera/alertmanager:v3.24.0-1.0
+quay.io/tigera/node:v3.24.0-1.0
+quay.io/tigera/node-windows:v3.24.0-1.0
+quay.io/tigera/cni-windows:v3.24.0-1.0
+quay.io/tigera/third-party-cni-plugins:v3.24.0-1.0
+quay.io/tigera/envoy-gateway:v3.24.0-1.0
+quay.io/tigera/envoy-proxy:v3.24.0-1.0
+quay.io/tigera/envoy-ratelimit:v3.24.0-1.0
+quay.io/tigera/istio-pilot:v3.24.0-1.0
+quay.io/tigera/istio-install-cni:v3.24.0-1.0
+quay.io/tigera/istio-ztunnel:v3.24.0-1.0
+quay.io/tigera/istio-proxyv2:v3.24.0-1.0
+quay.io/tigera/operator:v1.43.0
+quay.io/tigera/cc-core:v0.4.0
+quay.io/tigera/prometheus-operator:v3.24.0-1.0
+quay.io/tigera/prometheus-config-reloader:v3.24.0-1.0
+quay.io/tigera/cc-cni-config-scanner:v0.7.4`,
   // curl -0 https://installer.calicocloud.io/manifests/v3.23.1-4/image-list
-  'v23.0.2 (latest)': `quay.io/calico/istio-pilot:v3.32.1
+  'v23.0.2': `quay.io/calico/istio-pilot:v3.32.1
 quay.io/calico/istio-install-cni:v3.32.1
 quay.io/calico/istio-ztunnel:v3.32.1
 quay.io/calico/istio-proxyv2:v3.32.1
@@ -608,206 +643,6 @@ quay.io/tigera/cc-core:v0.3.1
 quay.io/tigera/prometheus-operator:v3.22.0-1.0
 quay.io/tigera/prometheus-config-reloader:v3.22.0-1.0
 quay.io/tigera/cc-cni-config-scanner:v0.6`,
-  // curl -0 https://installer.calicocloud.io/manifests/v3.21.0-2.0-12/image-list
-  'v21.3.0': `quay.io/tigera/cnx-apiserver:v3.21.0-2.0
-quay.io/tigera/compliance-benchmarker:v3.21.0-2.0
-quay.io/tigera/compliance-controller:v3.21.0-2.0
-quay.io/tigera/compliance-reporter:v3.21.0-2.0
-quay.io/tigera/compliance-snapshotter:v3.21.0-2.0
-quay.io/tigera/key-cert-provisioner:v3.21.0-2.0
-quay.io/tigera/deep-packet-inspection:v3.21.0-2.0
-quay.io/tigera/ui-apis:v3.21.0-2.0
-quay.io/tigera/fluentd:v3.21.0-2.0
-quay.io/tigera/fluentd-windows:v3.21.0-2.0
-quay.io/tigera/guardian:v3.21.0-2.0
-quay.io/tigera/intrusion-detection-controller:v3.21.0-2.0
-quay.io/tigera/webhooks-processor:v3.21.0-2.0
-quay.io/tigera/packetcapture:v3.21.0-2.0
-quay.io/tigera/policy-recommendation:v3.21.0-2.0
-quay.io/tigera/egress-gateway:v3.21.0-2.0
-quay.io/tigera/l7-collector:v3.21.0-2.0
-quay.io/tigera/envoy:v3.21.0-2.0
-quay.io/tigera/prometheus:v3.21.0-2.0
-quay.io/tigera/prometheus-service:v3.21.0-2.0
-quay.io/tigera/alertmanager:v3.21.0-2.0
-quay.io/tigera/cnx-queryserver:v3.21.0-2.0
-quay.io/tigera/kube-controllers:v3.21.0-2.0
-quay.io/tigera/cnx-node:v3.21.0-2.0
-quay.io/tigera/cnx-node-windows:v3.21.0-2.0
-quay.io/tigera/typha:v3.21.0-2.0
-quay.io/tigera/cni:v3.21.0-2.0
-quay.io/tigera/cni-windows:v3.21.0-2.0
-quay.io/tigera/es-gateway:v3.21.0-2.0
-quay.io/tigera/linseed:v3.21.0-2.0
-quay.io/tigera/dikastes:v3.21.0-2.0
-quay.io/tigera/l7-admission-controller:v3.21.0-2.0
-quay.io/tigera/pod2daemon-flexvol:v3.21.0-2.0
-quay.io/tigera/csi:v3.21.0-2.0
-quay.io/tigera/node-driver-registrar:v3.21.0-2.0
-quay.io/tigera/envoy-gateway:v3.21.0-2.0
-quay.io/tigera/envoy-proxy:v3.21.0-2.0
-quay.io/tigera/envoy-ratelimit:v3.21.0-2.0
-quay.io/tigera/operator:v1.38.2
-quay.io/tigera/image-assurance-admission-controller:v1.22.7
-quay.io/tigera/image-assurance-operator:v1.22.7
-quay.io/tigera/image-assurance-container-runtime-adaptor:v1.22.7
-quay.io/tigera/image-assurance-cluster-scanner:v1.22.7
-quay.io/tigera/runtime-security-operator:v1.23.0
-quay.io/tigera/skimble:v1.23.0
-quay.io/tigera/cc-core:v0.2.19
-quay.io/tigera/prometheus-operator:v3.21.0-2.0
-quay.io/tigera/prometheus-config-reloader:v3.21.0-2.0
-quay.io/tigera/cc-cni-config-scanner:v0.5`,
-  // curl -0 https://installer.calicocloud.io/manifests/v3.21.0-1.0-5/image-list
-  'v21.2.0': `quay.io/tigera/cnx-apiserver:v3.21.0-1.0
-quay.io/tigera/compliance-benchmarker:v3.21.0-1.0
-quay.io/tigera/compliance-controller:v3.21.0-1.0
-quay.io/tigera/compliance-reporter:v3.21.0-1.0
-quay.io/tigera/compliance-snapshotter:v3.21.0-1.0
-quay.io/tigera/key-cert-provisioner:v3.21.0-1.0
-quay.io/tigera/deep-packet-inspection:v3.21.0-1.0
-quay.io/tigera/ui-apis:v3.21.0-1.0
-quay.io/tigera/fluentd:v3.21.0-1.0
-quay.io/tigera/fluentd-windows:v3.21.0-1.0
-quay.io/tigera/guardian:v3.21.0-1.0
-quay.io/tigera/intrusion-detection-controller:v3.21.0-1.0
-quay.io/tigera/webhooks-processor:v3.21.0-1.0
-quay.io/tigera/packetcapture:v3.21.0-1.0
-quay.io/tigera/policy-recommendation:v3.21.0-1.0
-quay.io/tigera/egress-gateway:v3.21.0-1.0
-quay.io/tigera/l7-collector:v3.21.0-1.0
-quay.io/tigera/envoy:v3.21.0-1.0
-quay.io/tigera/prometheus:v3.21.0-1.0
-quay.io/tigera/prometheus-service:v3.21.0-1.0
-quay.io/tigera/alertmanager:v3.21.0-1.0
-quay.io/tigera/cnx-queryserver:v3.21.0-1.0
-quay.io/tigera/kube-controllers:v3.21.0-1.0
-quay.io/tigera/cnx-node:v3.21.0-1.0
-quay.io/tigera/cnx-node-windows:v3.21.0-1.0
-quay.io/tigera/typha:v3.21.0-1.0
-quay.io/tigera/cni:v3.21.0-1.0
-quay.io/tigera/cni-windows:v3.21.0-1.0
-quay.io/tigera/es-gateway:v3.21.0-1.0
-quay.io/tigera/linseed:v3.21.0-1.0
-quay.io/tigera/dikastes:v3.21.0-1.0
-quay.io/tigera/l7-admission-controller:v3.21.0-1.0
-quay.io/tigera/pod2daemon-flexvol:v3.21.0-1.0
-quay.io/tigera/csi:v3.21.0-1.0
-quay.io/tigera/node-driver-registrar:v3.21.0-1.0
-quay.io/tigera/envoy-gateway:v3.21.0-1.0
-quay.io/tigera/envoy-proxy:v3.21.0-1.0
-quay.io/tigera/envoy-ratelimit:v3.21.0-1.0
-quay.io/tigera/operator:v1.37.1
-quay.io/tigera/image-assurance-admission-controller:v1.22.6
-quay.io/tigera/image-assurance-operator:v1.22.6
-quay.io/tigera/image-assurance-container-runtime-adaptor:v1.22.6
-quay.io/tigera/image-assurance-cluster-scanner:v1.22.6
-quay.io/tigera/runtime-security-operator:v1.23.0
-quay.io/tigera/skimble:v1.23.0
-quay.io/tigera/cc-core:v0.2.18
-quay.io/tigera/prometheus-operator:v3.21.0-1.0
-quay.io/tigera/prometheus-config-reloader:v3.21.0-1.0
-quay.io/tigera/cc-cni-config-scanner:v0.4`,
-  // curl -0 https://installer.calicocloud.io/manifests/v3.21.0-1.0-5/image-list
-  'v21.1.0': `quay.io/tigera/cnx-apiserver:v3.21.0-1.0
-quay.io/tigera/compliance-benchmarker:v3.21.0-1.0
-quay.io/tigera/compliance-controller:v3.21.0-1.0
-quay.io/tigera/compliance-reporter:v3.21.0-1.0
-quay.io/tigera/compliance-snapshotter:v3.21.0-1.0
-quay.io/tigera/key-cert-provisioner:v3.21.0-1.0
-quay.io/tigera/deep-packet-inspection:v3.21.0-1.0
-quay.io/tigera/ui-apis:v3.21.0-1.0
-quay.io/tigera/fluentd:v3.21.0-1.0
-quay.io/tigera/fluentd-windows:v3.21.0-1.0
-quay.io/tigera/guardian:v3.21.0-1.0
-quay.io/tigera/intrusion-detection-controller:v3.21.0-1.0
-quay.io/tigera/webhooks-processor:v3.21.0-1.0
-quay.io/tigera/packetcapture:v3.21.0-1.0
-quay.io/tigera/policy-recommendation:v3.21.0-1.0
-quay.io/tigera/egress-gateway:v3.21.0-1.0
-quay.io/tigera/l7-collector:v3.21.0-1.0
-quay.io/tigera/envoy:v3.21.0-1.0
-quay.io/tigera/prometheus:v3.21.0-1.0
-quay.io/tigera/prometheus-service:v3.21.0-1.0
-quay.io/tigera/alertmanager:v3.21.0-1.0
-quay.io/tigera/cnx-queryserver:v3.21.0-1.0
-quay.io/tigera/kube-controllers:v3.21.0-1.0
-quay.io/tigera/cnx-node:v3.21.0-1.0
-quay.io/tigera/cnx-node-windows:v3.21.0-1.0
-quay.io/tigera/typha:v3.21.0-1.0
-quay.io/tigera/cni:v3.21.0-1.0
-quay.io/tigera/cni-windows:v3.21.0-1.0
-quay.io/tigera/es-gateway:v3.21.0-1.0
-quay.io/tigera/linseed:v3.21.0-1.0
-quay.io/tigera/dikastes:v3.21.0-1.0
-quay.io/tigera/l7-admission-controller:v3.21.0-1.0
-quay.io/tigera/pod2daemon-flexvol:v3.21.0-1.0
-quay.io/tigera/csi:v3.21.0-1.0
-quay.io/tigera/node-driver-registrar:v3.21.0-1.0
-quay.io/tigera/envoy-gateway:v3.21.0-1.0
-quay.io/tigera/envoy-proxy:v3.21.0-1.0
-quay.io/tigera/envoy-ratelimit:v3.21.0-1.0
-quay.io/tigera/operator:v1.37.1
-quay.io/tigera/image-assurance-admission-controller:v1.22.6
-quay.io/tigera/image-assurance-operator:v1.22.6
-quay.io/tigera/image-assurance-container-runtime-adaptor:v1.22.6
-quay.io/tigera/image-assurance-cluster-scanner:v1.22.6
-quay.io/tigera/runtime-security-operator:v1.23.0
-quay.io/tigera/skimble:v1.23.0
-quay.io/tigera/cc-core:v0.2.18
-quay.io/tigera/prometheus-operator:v3.21.0-1.0
-quay.io/tigera/prometheus-config-reloader:v3.21.0-1.0
-quay.io/tigera/cc-cni-config-scanner:v0.4`,
-  // curl -0 https://installer.calicocloud.io/manifests/v3.21.0-1.0-4/image-list
-  'v21.0.0': `quay.io/tigera/cnx-apiserver:v3.21.0-1.0
-quay.io/tigera/compliance-benchmarker:v3.21.0-1.0
-quay.io/tigera/compliance-controller:v3.21.0-1.0
-quay.io/tigera/compliance-reporter:v3.21.0-1.0
-quay.io/tigera/compliance-snapshotter:v3.21.0-1.0
-quay.io/tigera/key-cert-provisioner:v3.21.0-1.0
-quay.io/tigera/deep-packet-inspection:v3.21.0-1.0
-quay.io/tigera/ui-apis:v3.21.0-1.0
-quay.io/tigera/fluentd:v3.21.0-1.0
-quay.io/tigera/fluentd-windows:v3.21.0-1.0
-quay.io/tigera/guardian:v3.21.0-1.0
-quay.io/tigera/intrusion-detection-controller:v3.21.0-1.0
-quay.io/tigera/webhooks-processor:v3.21.0-1.0
-quay.io/tigera/packetcapture:v3.21.0-1.0
-quay.io/tigera/policy-recommendation:v3.21.0-1.0
-quay.io/tigera/egress-gateway:v3.21.0-1.0
-quay.io/tigera/l7-collector:v3.21.0-1.0
-quay.io/tigera/envoy:v3.21.0-1.0
-quay.io/tigera/prometheus:v3.21.0-1.0
-quay.io/tigera/prometheus-service:v3.21.0-1.0
-quay.io/tigera/alertmanager:v3.21.0-1.0
-quay.io/tigera/cnx-queryserver:v3.21.0-1.0
-quay.io/tigera/kube-controllers:v3.21.0-1.0
-quay.io/tigera/cnx-node:v3.21.0-1.0
-quay.io/tigera/cnx-node-windows:v3.21.0-1.0
-quay.io/tigera/typha:v3.21.0-1.0
-quay.io/tigera/cni:v3.21.0-1.0
-quay.io/tigera/cni-windows:v3.21.0-1.0
-quay.io/tigera/es-gateway:v3.21.0-1.0
-quay.io/tigera/linseed:v3.21.0-1.0
-quay.io/tigera/dikastes:v3.21.0-1.0
-quay.io/tigera/l7-admission-controller:v3.21.0-1.0
-quay.io/tigera/pod2daemon-flexvol:v3.21.0-1.0
-quay.io/tigera/csi:v3.21.0-1.0
-quay.io/tigera/node-driver-registrar:v3.21.0-1.0
-quay.io/tigera/envoy-gateway:v3.21.0-1.0
-quay.io/tigera/envoy-proxy:v3.21.0-1.0
-quay.io/tigera/envoy-ratelimit:v3.21.0-1.0
-quay.io/tigera/operator:v1.37.1
-quay.io/tigera/image-assurance-admission-controller:v1.22.6
-quay.io/tigera/image-assurance-operator:v1.22.6
-quay.io/tigera/image-assurance-container-runtime-adaptor:v1.22.6
-quay.io/tigera/image-assurance-cluster-scanner:v1.22.6
-quay.io/tigera/runtime-security-operator:v1.23.0
-quay.io/tigera/skimble:v1.23.0
-quay.io/tigera/cc-core:v0.2.16
-quay.io/tigera/prometheus-operator:v3.21.0-1.0
-quay.io/tigera/prometheus-config-reloader:v3.21.0-1.0
-quay.io/tigera/cc-cni-config-scanner:v0.3`,
 };
 
 export default ccImageLists;
diff --git a/static/_redirects b/static/_redirects
index efba06bcc9..c8e1333d0d 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -449,6 +449,13 @@
 /calico-enterprise/3.24/reference/resources/compliance-reports/* /calico-enterprise/3.24/reference/resources/ 301
 /calico-enterprise/3.24/reference/resources/globalreport /calico-enterprise/3.24/reference/resources/ 301
 
+# Calico Cloud 24 - compliance reporting feature removed (DOCS-3053)
+/calico-cloud/compliance/overview /calico-cloud/release-notes 301
+/calico-cloud/compliance/enable-compliance /calico-cloud/release-notes 301
+/calico-cloud/compliance/compliance-reports-cis /calico-cloud/release-notes 301
+/calico-cloud/reference/resources/compliance-reports/* /calico-cloud/reference/resources/ 301
+/calico-cloud/reference/resources/globalreport /calico-cloud/reference/resources/ 301
+
 # allow-tigera tier renamed to calico-system, in Calico Cloud 23 and Calico Enterprise 3.23
 /calico-cloud/network-policy/policy-tiers/allow-tigera /calico-cloud/network-policy/policy-tiers/calico-system 301
 /calico-cloud/next/network-policy/policy-tiers/allow-tigera /calico-cloud/next/network-policy/policy-tiers/calico-system 301