Airbus Defence and Space did not announce a valuation. It announced a closed file. On October 1, 2026, Airbus said it had finalised the acquisition of French cybersecurity company Quarkslab after regulatory approvals. Deal value: Undisclosed. That silence is the point. This is industrial policy executed as M&A — not a growth equity beauty contest.
What closed, as printed. Airbus’s Oct 1 release: Quarkslab founded 2011; privately owned; approximately 100 employees, primarily Paris and Rennes; backed by Tikehau Capital since 2020. Flagship product QShield — positioned as software protection for providers, including against AI-enabled reverse engineering of edge components in defence and aerospace. In-house QLab research team. Already an Airbus supplier and partner before the buy. Integration target: Connected Intelligence / cybersecurity activities inside Defence and Space. François Lombard (Head of Connected Intelligence) framed it as reinforcing a “resilient, sovereign cyber player in France and across Europe.”
The European pattern, not a one-off. Same Airbus releases place Quarkslab after Infodas in Germany (2024) and Ultra Cyber Ltd in the UK (announced March 2026; Airbus’s close PR treats Ultra as completed in that chain). Defence and Space claims a pan-European cyber footprint across France, the UK, Germany, Spain, and Finland. The April 21, 2026 agreement PR said closing needed social-partner consultation and customary approvals “in the course of 2026.” October 1 is that close. Price on both the agreement and completion wires: Undisclosed.
POV — why a prime buying a research/offensive shop matters. Commercial cyber M&A often chases ARR and channel. Defence-prime cyber M&A chases control of know-how that sits next to flight software, weapons systems, and government networks. Quarkslab’s public product story is software shielding and research depth — the kind of capability that protects IP and mission systems from reverse engineering, including AI-assisted attacks. For European buyers and ministries, “sovereign” is not a brand adjective. It is a procurement constraint. Airbus is assembling that constraint in-house: German, British, and French assets under one Defence and Space cyber umbrella.
Supply chain, not just SOC seats. When a research shop that already supplies Airbus becomes an Airbus subsidiary, the commercial market loses an independent specialist and the aerospace/defence software stack gains a captive protection layer. Competitors — other EU primes, U.S. defence cyber units, and independent software-protection vendors — should assume more captive demand and fewer open RFPs for the same niche. Independence premiums for remaining EU research boutiques go up until the next prime call. Channel partners selling into Airbus programmes should expect tighter preferred-vendor lists, not a bigger open marketplace.
What this does not prove. It does not prove Quarkslab’s commercial ARR trajectory. It does not publish a multiple. It does not mean every European research lab will be scooped at the same tempo. It does mean boards watching EU cyber policy should track who owns the labs, not only who wins the next grant. Industrial strategy that cannot buy talent rents it — until a prime writes the close press release.
Desk sheet — sourced only: Airbus Oct 1, 2026 — close confirmed; ~100 employees; QShield/QLab; Tikehau since 2020; Infodas 2024 + Ultra Cyber UK March 2026 context; pan-EU footprint FR/UK/DE/ES/FI; price Undisclosed. Airbus Apr 21, 2026 — agreement announced; closing subject to consultation/approvals. EDR Magazine Oct 1, 2026 — secondary confirmation of headcount/QShield framing. Revenue, multiple, cash vs stock: Undisclosed.