Any software tool that is preceded by the word “headless” means it works on the back-end side and transfers data through API calls. The same is true for a headless database. This is good for information security, since attackers cannot damage the database, as it is not directly connected to the front end (website, mobile app, etc.).