Ultra Cyber
UK sovereign cryptography and MoD cyber-defence firm being acquired by Airbus from Cobham.
Last refreshed: 30 April 2026 · Appears in 1 active topic
Should UK MoD-cleared cryptography require a sovereignty-of-control condition before it can transfer to a continental prime?
Timeline for Ultra Cyber
Agreed to transfer to Airbus ownership with PRA and MoD clearance review pending
Cybersecurity: Threats and Defences: Airbus signs for Ultra Cyber from CobhamMentioned in: Beazley shareholders clear Zurich's £8.1bn bid
Cybersecurity: Threats and DefencesMentioned in: NCSC ships SilentGlass, its first commercial product
Cybersecurity: Threats and Defences- Why is Airbus buying Ultra Cyber from Cobham?
- Airbus is acquiring Ultra Cyber to strengthen its defence-cyber portfolio with UK sovereign cryptography capability and MoD-cleared programme expertise. Ultra Cyber gives Airbus Defence and Space a UK-sovereign cryptography division inside its existing UK defence footprint.Source: PrivSource / multiple outlets
- What regulatory approvals does the Airbus Ultra Cyber deal need in the UK?
- The deal requires both a Prudential Regulation Authority financial review and a UK Ministry of Defence security-clearance review of the change of control. The MoD review is the more complex element — UK sovereign cryptography capability moving to a non-UK ultimate owner has no direct precedent in recent NSIA decisions.Source: Briefing analysis
- Does the National Security and Investment Act apply to the Airbus Ultra Cyber deal?
- Ultra Cyber's cryptography work for MoD programmes falls within the NSIA's advanced materials and military-adjacent categories that require mandatory notification. Ministers have the power to impose conditions, including sovereignty-of-control requirements, though no public indication of their intent has been given.
Background
Ultra Cyber is a UK-based sovereign cybersecurity company specialising in cryptography and data-security systems for UK Ministry of Defence programmes. It originated within the wider Ultra Electronics group before Cobham acquired it as part of a broader portfolio deal. Its cryptography work sits within the UK's defence-industrial supply chain at a clearance level requiring MoD vetting for personnel and facilities, making it one of the most sensitive UK cyber-industrial assets by classification tier.
Airbus signed a definitive agreement in April 2026 to acquire Ultra Cyber from Cobham, moving UK MoD-cleared cryptography capability inside a European continental defence prime for the first time. The acquisition will trigger both a Prudential Regulation Authority financial review and a UK Ministry of Defence security-clearance review of the change of control — the latter being structurally novel, given no direct precedent for MoD-cleared cryptography passing to a non-UK ultimate owner under the NSIA regime.
The Airbus acquisition of Ultra Cyber from Cobham raises the core sovereignty question of whether MoD-cleared cryptography should carry a control condition when changing hands to a foreign industrial prime. The National Security and Investment Act gives ministers the mechanism to impose conditions; the Ultra Cyber deal tests whether that mechanism will be actively used for cyber-specific capability rather than only for physical hardware.
The transaction completes a week in which two UK cyber-industrial assets — Ultra Cyber and Beazley's incident-response intelligence — moved outside UK consolidated ownership, while NCSC simultaneously launched SilentGlass as the one UK-retaining deal of the three. For prime contractors across the UK defence-industrial base, the MoD's response to the Airbus review will set precedent.