IN Brief:
- Airbus has agreed to acquire Ultra Cyber Ltd, adding a UK cyber business of more than 200 employees centred on Maidenhead.
- The deal complements Airbus’ existing cyber activity in Newport and follows its 2024 infodas acquisition in Germany.
- Beyond software services, the transaction strengthens a broader sovereign engineering base around secure communications, datalinks, testing, integration, and cyber product development.
Airbus has entered into a definitive agreement to acquire Ultra Cyber Ltd from Cobham Ultra, adding a substantial UK cyber engineering capability to its defence and security portfolio. The company says the business, which has more than 200 employees primarily based at Maidenhead, will join the cyber activities of Airbus Defence and Space’s Connected Intelligence unit and strengthen its position as a sovereign partner for the UK and allied markets.
The transaction is also notable for what comes with it. Airbus says the acquisition includes a specialised airborne datalinks capability that complements its military aircraft portfolio, extending the logic of the deal beyond enterprise cyber services and into secure communications between airborne and ground environments. Closing remains subject to regulatory approvals and is expected in the second half of 2026.
On one level, this is a straightforward scale play. Airbus already has sovereign cyber activity in Newport, Wales, and last year completed the acquisition of German cyber specialist infodas, widening its cross-domain cyber position in continental Europe. With Ultra Cyber, it can deepen its UK bench while tightening the connection between cyber, military aviation, and secure digital infrastructure.
But the more interesting point is industrial. Cyber is still too often discussed as if it were an abstract service layer, detached from factories, product development, and physical engineering. In defence, that distinction has broken down. Secure data handling, accredited cryptography, mission systems hardening, airborne links, and protected software architectures now sit inside the production logic of platforms and networks themselves.
Cyber capability still has to be built somewhere
Ultra’s Maidenhead operation gives Airbus more than headcount. Ultra opened the site in 2024 as a 56,000 sq ft cyber centre of excellence backed by a £30 million investment, designed as an engineering, integration, and testing facility for around 250 engineers. That matters because sovereign cyber capacity depends on places like this: secure labs, certification environments, integration benches, and the specialist workforce needed to turn sensitive requirements into fielded capability.
In other words, the industrial base for cyber is not metaphorical. It includes the buildings, tooling, processes, and cleared talent needed to develop and assure products that can move protected data in operational conditions. When airborne datalinks are part of the transaction, the overlap with defence manufacturing becomes even more direct.
What the deal says about European defence supply chains
Airbus is increasingly assembling a pan-European cyber structure with national centres of gravity. The UK, Germany, France, Spain, and Finland are already part of that footprint, and the Ultra acquisition strengthens the British pillar at a time when governments want trusted domestic or allied ownership of critical digital capability.
That is likely to matter as much for future programmes as for current contracts. Aircraft, ISR networks, collaborative combat systems, and battlefield communications are all becoming more software-defined and more dependent on secure data movement across domains. In that environment, buying a cyber company is not a side bet from an aerospace prime. It is part of the production architecture of modern defence. The Ultra deal shows Airbus is treating it that way.
