"It may be easier to understand what Shine Security is, by first explaining what it is not. Unlike traditional anti-virus/anti-malware providers, Shine doesn’t use definition files or virus signatures (like Symantec, Kaspersky, McAfee and others); it doesn’t analyze code in search of patterns (like Lookout), nor does it use “sandboxing” techniques where files and bits initially run in a protected space for milliseconds to help determine whether or not the code is malicious.
Instead, Shine Security performs real-time behavioral analysis on the device itself. It monitors every event taking place using machine learning algorithms that identify new threats moments after they occur. Of course, that means it can’t stop the very first steps that a particular piece of malware may take – the activity that helps Shine identify it in the first place. But that’s where the company’s other breakthrough comes in. Devices running Shine can “self heal” after malicious code runs, and is then stopped.
This is different from doing a restore from backup, like you can do today using things like Apple’s Time Machine, for example. Where that wipes a section of the operating system itself, and re-installs things that were saved before,
Shine is actually rolling back the specific damages and code changes step-by-step.
Protection is not based on signatures, it’s based on machine learning and AI. Our protection rate is 96% and traditional antivirus is 50%."
Source
Make sure to look about self heal it is not included in free vs.