Kernel installs lightweight agents that profile normal I/O patterns and flag anomalous encryption activity in real time. The Canberra-based startup works with ANU's cybersecurity lab and has been adopted by 23 Australian professional service firms and government agencies. Zero false-positive rate in live deployments.